At MaintenancePay (a product of Ivan Digital Solutions), we value the trust you place in us. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website, platform, and services ("Services"). This policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
1. Information We Collect
We collect the following categories of information:
a) Information Provided by Committee Administrators:
- Society name, address, registration details, and GST number
- Administrator name, email address, phone number, and role
- Bank account details for settlement purposes
- Resident data including names, flat numbers, email addresses, and phone numbers
b) Information from Residents (via payment):
- Name, email address, and phone number
- Payment method details (processed securely through Payment Gateways - we never store full card numbers)
- Transaction history and receipt records
c) Automatically Collected Information:
- IP address, browser type, device information, and operating system
- Pages visited, time spent, referral source, and navigation patterns
- Cookies and similar tracking technologies (see Section 10)
2. Legal Basis for Processing
Under the DPDP Act 2023, we process your data based on:
- Consent: Obtained when you register an account or submit information through our forms
- Contractual necessity: Required to provide our billing and collection services
- Legitimate interest: To improve our platform, prevent fraud, and communicate service updates
- Legal obligation: To comply with applicable tax, accounting, and regulatory requirements
3. How We Use Your Information
We use collected information strictly for:
- Facilitating society maintenance billing and payment collection
- Sending automated payment reminders via WhatsApp, SMS, and email
- Generating GST-compliant receipts
- Displaying collection analytics and reports to Committee Administrators
- Processing settlements to registered bank accounts
- Providing customer support and onboarding assistance
- Improving Platform performance, features, and user experience
- Sending service-related notifications and updates
- Detecting and preventing fraud or unauthorised activity
4. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data to advertisers or marketing companies. We share data only with:
- Payment Gateway Partners (Razorpay, PayU) - for secure payment processing
- Communication Service Providers - for delivering WhatsApp, SMS, and email notifications
- Cloud Infrastructure Providers - for secure hosting and data storage
- Legal Authorities - when required by law, court order, or government regulation
All third-party service providers are bound by confidentiality agreements and are required to comply with applicable data protection laws.
5. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:
- Active accounts: Data is retained for the duration of your subscription
- Cancelled accounts: Account data is retained for 90 days after cancellation, then permanently deleted unless required for legal/tax compliance
- Transaction records: Retained for 7 years as per Indian accounting and tax regulations
- Website analytics: Retained for 26 months
6. Data Security Measures
We implement industry-standard security measures to protect your data:
- 256-bit TLS/SSL encryption for all data in transit
- AES-256 encryption for data at rest
- PCI-DSS Level 1 compliant payment processing (via gateway partners)
- Regular security audits and vulnerability assessments
- Role-based access controls with multi-factor authentication for admin access
- Automated backup systems with geo-redundant storage
- DDoS protection and Web Application Firewall (WAF)
7. Your Rights Under DPDP Act 2023
As a data principal under the DPDP Act, you have the right to:
- Access: Request a copy of your personal data we hold
- Correction: Request correction of inaccurate or incomplete personal data
- Erasure: Request deletion of your personal data (subject to legal retention requirements). Visit our Data Deletion page to submit a request
- Withdraw consent: Withdraw your consent for data processing at any time (this may affect service availability)
- Grievance redressal: Lodge a complaint regarding data handling
- Nominate: Nominate another person to exercise your data rights in case of death or incapacity
To exercise any of these rights, contact us at info@ivandigitalsolutions.com.
8. Children's Privacy
Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If a Committee Administrator uploads data that includes information about a minor, the administrator is responsible for ensuring appropriate parental/guardian consent. If we become aware of unauthorized collection of a child's data, we will take prompt steps to delete it.
9. International Data Transfers
Your data is primarily processed and stored in India. In cases where data may be transferred to servers outside India (e.g., cloud infrastructure), we ensure appropriate safeguards are in place, including data processing agreements with service providers that meet DPDP Act requirements.
10. Cookies & Tracking
Our website uses cookies and similar technologies for:
- Essential cookies: Required for basic site functionality (session management, security)
- Analytics cookies: To understand how visitors interact with our website (e.g., Google Analytics)
- Functional cookies: To remember your preferences (e.g., billing toggle selection)
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email to registered Committee Administrators. The "Last Updated" date at the top indicates the most recent revision.
12. Grievance Officer
In accordance with the DPDP Act 2023, we have appointed a Grievance Officer to address your concerns regarding data processing:
13. Contact Us
For any privacy-related questions, data requests, or concerns: