Digital security and data protection concept
Your Privacy Matters

Privacy Policy

At Kamal Housing, we are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.

Last updated: March 1, 2026

Data Encryption

All data is encrypted at rest and in transit using AES-256 and TLS 1.3 protocols.

Secure Storage

Your data is stored on AWS infrastructure with ISO 27001 certification and regular backups.

Access Control

Strict role-based access ensures only authorized personnel can view your information.

Transparency

We are fully transparent about what data we collect, why, and how it is used.

1. Information We Collect

Personal Information

When you register on our platform, we collect your name, email address, phone number, flat/unit number, and residential society details. For committee members and administrators, we may also collect designation and role information.

Visitor Data

Our gate management system captures visitor names, phone numbers, vehicle details, photographs (with consent), and entry/exit timestamps. This data is essential for maintaining security logs and enabling the visitor approval workflow.

Financial Information

For billing and payment processing, we collect bank account details, UPI IDs, or card information through our secure payment gateway partners (Razorpay, Cashfree). We do not store complete card numbers on our servers.

Usage Data

We automatically collect information about how you interact with our platform, including device type, browser, IP address, pages visited, features used, and session duration. This helps us improve our services.

Communication Data

Messages sent through our community forums, complaints, and service requests are stored to maintain communication history and ensure proper resolution tracking.

2. How We Use Your Information

Service Delivery

We use your personal information to provide and maintain our society management services, including gate management, visitor tracking, billing, amenity booking, and complaint management.

Security Operations

Visitor data and entry/exit logs are used to maintain security records, generate security reports, and enable real-time monitoring of your residential community.

Communication

We use your contact information to send service notifications, visitor alerts, payment reminders, community announcements, and important system updates.

Analytics & Improvement

Usage data helps us understand how our platform is used, identify areas for improvement, optimize performance, and develop new features that better serve your community.

Legal Compliance

We may use your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Information Sharing & Disclosure

Within Your Society

Certain information (such as flat number, name, and contact details) may be visible to authorized society administrators and committee members as required for society management operations.

Service Providers

We share necessary data with trusted third-party service providers including payment gateways, cloud hosting (AWS), SMS/notification services, and analytics tools. All providers are bound by strict data processing agreements.

Legal Requirements

We may disclose information when required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

No Sale of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is never used for advertising targeting outside our platform.

4. Data Security Measures

Infrastructure Security

Our platform is hosted on Amazon Web Services (AWS) with enterprise-grade security, including firewalls, intrusion detection systems, and DDoS protection. We maintain ISO 27001 compliance.

Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256 encryption standards.

Access Controls

We implement strict role-based access controls, multi-factor authentication for administrative access, and regular access audits to ensure only authorized personnel can access sensitive data.

Regular Audits

We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security risks proactively.

5. Your Rights & Choices

Access & Portability

You have the right to request a copy of all personal data we hold about you. We will provide this in a commonly used, machine-readable format within 30 days of your request.

Correction

You can update or correct your personal information at any time through the app settings or by contacting our support team.

Deletion

You may request deletion of your personal data. We will comply within 30 days, except where we are required to retain certain data for legal or legitimate business purposes.

Opt-Out

You can opt out of non-essential communications and marketing messages at any time. Essential service notifications related to security and billing cannot be opted out of while your account is active.

Consent Withdrawal

You may withdraw your consent for data processing at any time. Please note that withdrawing consent may limit your ability to use certain features of our platform.

6. Cookies & Tracking

Essential Cookies

We use essential cookies that are necessary for the platform to function, including session management, authentication, and security tokens.

Analytics Cookies

We use analytics cookies to understand usage patterns and improve our services. These can be disabled through your browser settings without affecting core functionality.

No Third-Party Advertising

We do not use third-party advertising cookies or tracking pixels. Your activity on our platform is never shared with advertisers.

7. Data Retention

Active Accounts

We retain your personal data for as long as your account is active and your society uses our services. Visitor logs and security records are retained for a period determined by your society's policy (typically 6-12 months).

After Account Deletion

Upon account deletion, we retain anonymized data for analytics purposes. Personal data is permanently deleted within 90 days, except where retention is required by law (such as financial records which may be retained for up to 7 years).

Backup Data

Backup copies of data may persist for up to 30 days after deletion from live systems as part of our disaster recovery process.

8. Children's Privacy

Age Restrictions

Our platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. Child safety features (such as child departure alerts) are managed through parent/guardian accounts.

9. Policy Updates

Notification of Changes

We may update this Privacy Policy from time to time. Significant changes will be notified through in-app notifications, email, or prominent notice on our website at least 30 days before they take effect.

Continued Use

Your continued use of our services after policy changes constitutes acceptance of the updated terms. If you disagree with any changes, you may request account deletion.

10. Contact Us

Data Protection Officer

For any privacy-related questions, data access requests, or concerns, please contact our Data Protection Officer at privacy@kamalhousing.com or write to us at: Kamal Housing Pvt. Ltd., Bandra Kurla Complex, Mumbai 400051, Maharashtra, India.

Grievance Redressal

If you are not satisfied with our response to your privacy concern, you may file a complaint with the relevant data protection authority in your jurisdiction.

Questions About Your Privacy?

Our Data Protection Officer is here to help with any privacy concerns or data requests.