DIGISWAGAT

1. Introduction

DigiSwagat is a Visitor Management System developed by DIGIITSHAKTI INFOTECH LLP ("DigiShakti", "we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect personal information when you use the DigiSwagat mobile application, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian law.

Under the DPDP Act, DigiShakti acts as a Data Fiduciary for personal data processed through DigiSwagat. Your residential society or organisation (the client) acts as the data controller for resident records within its tenancy.

2. Information We Collect

• Phone number — used for account creation, OTP-based login, and identity verification
• Full name — used to identify residents and visitors within the society
• Unit/flat number — used to associate your account with your residence
• Visitor information — name, contact, and purpose of visit, logged when you pre-book or approve visitors
• Device push token — used to send real-time notifications for visitor approvals and announcements
• Camera access — the DigiSwagat Guard app requests camera permission for future visitor photo capture functionality. This feature is not currently active. No images are captured or stored at this time.

3. How We Use Your Information

• To authenticate you via OTP login
• To manage visitor entry and exit at your society
• To send push notifications for visitor approvals, announcements, and alerts
• To generate visitor reports for society administrators
• To maintain security logs for your residential society

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your data is shared only with:

• Your society administrator — for resident management and approval purposes
• Guards at your society — visitor name and unit number for entry management
• MSG91 / Meta WhatsApp — for OTP delivery only (phone number shared for message delivery)
• Expo Push Service / Google Firebase Cloud Messaging — for delivering push notifications (device push token only; processed via Google infrastructure)
• Hostinger (hosting provider) — application data is stored on servers located in Mumbai, India

5. Data Retention

• Visitor logs are retained for the duration of your society's active subscription with DigiSwagat
• Your account data is retained until your account is deactivated by your society administrator, or until you request deletion directly (see Section 7)
• OTPs are automatically deleted after 5 minutes or upon successful verification
• If your society's subscription is cancelled or terminated, all tenant data (resident records, visitor logs, account data) will be retained for 30 days to allow for data export by the society administrator, after which it will be permanently deleted from our systems, unless we are required to retain it longer under applicable law

6. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Authentication tokens are stored securely using device secure storage
• Passwords (where applicable) are hashed using industry-standard algorithms
• Access to personal data is restricted to authorised society personnel only

7. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Erasure — request deletion of your account and associated personal data, where retention is not otherwise required by law or your society's operational records
• Grievance Redressal — raise concerns about how your data is processed and receive a response within a reasonable timeframe
• Withdraw Consent — opt out of non-essential communications and notifications at any time

To exercise these rights, you may contact your society administrator (for society-managed data such as unit assignment) or our Grievance Officer directly:

Note: If your account is deleted while your society's subscription remains active, your unit's visitor history may be retained in anonymised form for the society's security records, as required for legitimate operational purposes.

8. Push Notifications

DigiSwagat sends push notifications for visitor approvals, announcements, and security alerts. You can disable notifications at any time through your device settings. Note that disabling notifications may affect your ability to approve visitors in real time.

9. Children's Privacy

DigiSwagat accounts are intended for use by adults (18 years and above). We do not knowingly collect personal information from children under 18 for account creation.

However, visitor logs recorded by security personnel may include details of minor visitors (e.g. children visiting residents). This data is limited to name and purpose of visit, is used solely for society security and entry/exit records, and is subject to the same retention and deletion rules described in Section 5.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Company: DIGIITSHAKTI INFOTECH LLP
• Email: prawal.sharma@digishakti.co.in
• Address: 143 Sage Milestone, Samardha Kaliyasot Huzur, Misrod, Bhopal – 462047, Madhya Pradesh, India