Privacy Policy

Effective date: 10 November 2026

This Privacy Policy explains how Sri Sai Premium PG ("the PG", "we", "us" or "our") collects, uses, stores, shares and protects your personal data when you use the StayLedger tenant and staff apps, website and portals (together, the "Service"). It is published in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Who We Are

• 1.1The PG is the Data Fiduciary. It decides why and how your personal data is used.
• 1.2StayLedger provides the software and acts as a Data Processor, processing personal data only on the PG's instructions to operate the Service.
• 1.3By using the Service, you consent to the processing of your personal data as described in this Policy.

2. Personal Data We Collect

• 2.1Identity and contact data: name, email address, mobile number, gender, date of birth where provided, home address, city and state.
• 2.2Tenancy data: Tenant ID, room and bed, joining and vacating dates, rent, security deposit, notice and stay history.
• 2.3Identity documents: a copy of the government or office ID you upload for verification, such as Aadhaar, PAN, voter ID, driving licence or employee ID.
• 2.4Payment data: amounts paid, payment method, UPI or transaction reference and payment screenshots. We do not collect card numbers, bank passwords or UPI PINs.
• 2.5Emergency data: emergency contact details you provide and records of SOS alerts you raise.
• 2.6Service data: problem reports and photographs, meal choices and food preference, feedback, and messages to the in-app assistant.
• 2.7Account and security data: sign-in times, signed-in devices, device type, IP address, failed sign-in attempts and activity logs.
• 2.8Notification data: a device token used to send app notifications, if you allow notifications.
• 2.9Website and enquiry data: pages visited, IP address, device and browser type and referring source; and the name and phone number you enter when you book a visit or send us a message.

3. Sensitive Personal Data

• 3.1Identity documents and financial information are treated as sensitive personal data.
• 3.2Such data is collected only where required for your stay, is visible only to authorised owner-level staff, and is protected by additional access controls.
• 3.3We do not collect passwords, biometric data, health records or card details through the Service.

4. How We Collect Personal Data

• 4.1Directly from you, when you register with the PG, sign in, upload documents, make payments or use any feature of the Service.
• 4.2From the Manager, who enters your tenancy details when you join.
• 4.3From Google, when you choose Google sign-in. We receive only your verified email address.
• 4.4Automatically, through security logs and basic technical data when you use the Service.

5. Purposes for Which We Use Personal Data

• 5.1To create and manage your account and verify your identity at sign-in.
• 5.2To manage your tenancy, record and verify rent payments and issue receipts.
• 5.3To verify identity documents as required for residents of the PG.
• 5.4To handle maintenance requests, meals, notices, feedback and move-out requests.
• 5.5To respond to emergencies and alert the PG's staff when you raise an SOS.
• 5.6To send service communications such as sign-in codes, reminders, receipts and notices.
• 5.7To keep the Service secure, prevent fraud and misuse, and comply with legal, police verification and accounting obligations.
• 5.8We do not sell your personal data and we do not use it for advertising.

6. Consent

• 6.1We process your personal data on the basis of your consent and for legitimate uses permitted by law, including performance of your stay and compliance with legal obligations.
• 6.2You may withdraw your consent at any time by writing to us. Withdrawal does not affect processing already carried out and may mean we cannot continue to provide the Service.

7. Sharing and Disclosure

• 7.1PG staff: owners, managers and staff see only the data they need for their role.
• 7.2Service providers: Amazon Web Services (hosting and storage), an email delivery provider, Google Firebase (app notifications) and Google (sign-in). They process data only on our behalf and under their own security obligations.
• 7.3Legal disclosure: to police, government or regulatory authorities where required by law, or to protect the safety and rights of residents, staff or the PG.
• 7.4We do not share your personal data with any other party without your consent.

8. Storage and Location of Data

• 8.1Your personal data is stored on secure cloud servers located in India (Amazon Web Services, Mumbai region).
• 8.2Some service providers, such as Google, may process limited data outside India in accordance with applicable law.

9. Data Security

• 9.1All data is encrypted in transit using HTTPS (TLS).
• 9.2Uploaded files are kept in access-controlled storage and are available only to you and authorised staff. A tenant can access only their own files.
• 9.3Access is protected by one-time code sign-in, temporary account lock after repeated wrong codes, limits on code requests and devices, and role-based permissions.
• 9.4We follow reasonable security practices. However, no system is completely secure, and you must keep your email account and sign-in codes safe.

10. Data Retention

• 10.1We keep your personal data for as long as your stay or account is active.
• 10.2After you vacate, your data is kept only for as long as necessary for settlement, legal and accounting purposes, and is then deleted.
• 10.3Rent receipts and financial records may be retained for the period required by tax and accounting laws.
• 10.4Website visit records, including IP addresses, are deleted automatically after 90 days.

11. Your Rights

• 11.1Access: to obtain a summary of the personal data we hold about you.
• 11.2Correction: to have inaccurate or incomplete data corrected or updated.
• 11.3Erasure: to request deletion of your data, subject to legal and accounting requirements.
• 11.4Withdrawal of consent: as described in Section 6.
• 11.5Grievance redressal: to raise a complaint with our Grievance Officer under Section 17.
• 11.6Nomination: to nominate a person to exercise your rights in the event of your death or incapacity.
• 11.7To exercise any right, contact the Manager, write to srisaipremiumpg@gmail.com, or use the Contact page of the PG website. We may verify your identity before acting on your request.

12. Cookies and Local Storage

• 12.1We use essential cookies to keep you signed in securely.
• 12.2Your device stores settings such as appearance (light or dark mode) and app preferences.
• 12.3We do not use advertising or third-party tracking cookies.

13. Communications

• 13.1Sign-in codes, receipts, reminders and notices are sent to your registered email address.
• 13.2App notifications are sent only if you allow them. You can turn them off in your device settings at any time.

14. Children

• 14.1The Service is meant only for persons aged 18 years or older. We do not knowingly collect personal data of children.

15. Personal Data Breach

• 15.1In the event of a personal data breach, we will take immediate steps to contain it and will inform affected users and the Data Protection Board of India as required by law.

16. Changes to this Policy

• 16.1We may update this Policy from time to time. The updated version will be published in the Service with a revised effective date.
• 16.2Significant changes will be notified to you through the Service.

17. Grievance Officer and Contact

• 17.1For any question, request or complaint about this Policy or your personal data, contact our Grievance Officer, the owner of Sri Sai Premium PG, in person, by email at srisaipremiumpg@gmail.com, or through the Contact page of the PG website.
• 17.2Address: Sri Sai Premium PG, Bengaluru, Karnataka, India.
• 17.3We will acknowledge your complaint within 48 hours and resolve it within 30 days.