Privacy Notice

1. Information we process

Account information includes your name, Login ID, password hash, role, access/session records and optional contact/profile details you provide, such as phone, receipt email, address, date of birth or profile image. We do not store your sign-in password as readable account data.

Workspace records can include property/apartment addresses and areas, ownership shares, tenancy connections, meter readings, bills, receipts, personal income/expenses, custom categories, recurring plans, payroll breakdowns and financial-year report settings.

For a manual payment we process the invoice, sender or agent number, transaction reference, amount, payment time, review outcome and any optional reference screenshot you attach. A screenshot is not mandatory. Security/hosting providers may process request metadata such as IP address, browser details and error logs. Do not upload unrelated identities, health records, NID/TIN documents, card details, PINs or OTPs.

Feedback submissions contain your account identity, report type, subject, details, an optional page path, support replies and any optional screenshot you attach. These reports are private to you and authorised Super Admin support. Do not submit passwords, PINs, OTPs or unrelated sensitive information.

2. Purposes and choices

We process information to register and authenticate accounts, provide requested financial/property records, calculate and export supporting reports, manage access, verify payments, prevent fraud, provide support and meet applicable obligations. The relevant basis depends on the activity, including the requested service arrangement, applicable legal duties and specific permission where required.

Email is optional. A verified receipt email is used for requested service messages/receipts. Acknowledging this notice is not consent to unrelated marketing. We do not currently implement an advertising-cookie or third-party analytics programme in the app code.

Optional permissions and optional data are not required merely to create a basic account. Requests to withdraw permission or object to processing can be sent to support. If essential processing cannot continue, we will explain which requested service becomes unavailable and consider applicable rights and exceptions.

Feedback is used to investigate problems, consider suggestions, respond to customers and track support progress. You can submit feedback without attaching an image.

3. Access, providers and transfers

Owners and their connected tenants see the property/rent information permitted by their roles. Personal Ledger data is account-scoped; being an Owner or sponsor does not automatically expose a tenant’s private ledger. Super Admin/support access is used only for relevant administration, safety, payment review or support.

Your feedback and its screenshots are not public reviews. Other customers and property Owners do not receive access to your private feedback simply because they share a property or sponsor your subscription.

Deployment uses providers such as Vercel, MongoDB Atlas and, when enabled, an SMTP/email provider. Hosting and support may involve processing outside Bangladesh according to the actual deployment regions and provider arrangements. Contact us for the current provider/location register. We assess applicable transfer requirements; we do not claim all data stays in Bangladesh.

We may disclose the minimum necessary information for a valid legal requirement, fraud/dispute handling or authorised support. We do not sell personal financial records. If another operator takes over the service, affected users will be informed and applicable safeguards/rights must be addressed.

4. Security and confidentiality

We use role and account ownership checks, password hashing, session controls and other technical safeguards. New local backup archives use authenticated encryption. These measures do not create an absolute security guarantee. Report suspected exposure or account compromise using the support contact below.

Payment screenshots are private and optional. Any attached screenshot is removed from the live submission record after payment approval. Unreviewed/rejected screenshots have a seven-day retention marker, with actual removal depending on cleanup execution. Transaction/review records remain separately. Older backups may still contain an earlier copy until the applicable archive lifecycle or an erasure request is handled.

Feedback screenshots are private and stop being available through the app 30 days after submission. Super Admin can remove expired images using the feedback cleanup action. Marking feedback Resolved or Closed does not currently delete its screenshot automatically. Actual database removal depends on cleanup execution; messages, replies and status history remain separately.

5. Retention and deletion

See the Data Retention Policy for the separate 30-day inactive-ledger period, normal 60-day archive rotation, shared-record exclusions and recovery limitations. Automatic ledger cleanup is safety-gated and can be disabled during rollout; we do not promise every copy is erased exactly on a particular day.

Feedback messages and replies remain in support history for relevant support, dispute handling and service administration, subject to necessity review and applicable privacy requests. Feedback image expiry is separate from the account’s subscription or ledger-retention deadline.

A lawful correction, access, portability, objection or erasure request is considered separately from subscription expiry and is not rejected merely because a recovery-request window has passed. Required changes must also be addressed across applicable backup/test/provider copies; ordinary backup rotation is not a blanket answer to an approved erasure request.

6. Your requests and complaints

Email the support address below with your Login ID (if any), relevant dates and the request: access/copy, correction, portability, processing information, withdrawal/objection, erasure or complaint. A non-account-holder whose data was entered by an Owner can also contact us. Do not send passwords, PINs or unnecessary identity documents.

Signed-in customers can also use the Feedback page for ordinary problems, suggestions and support messages. If you cannot sign in, use the support email. A feedback status does not replace or limit a formal privacy request or complaint.

We check identity proportionately, assess the request and affected third-party rights, record the action, explain any lawful limitation and respond within applicable requirements. Our operational target is to acknowledge a request within two working days; this does not replace a statutory deadline or restrict regulator/court remedies. There is no charge merely to raise a privacy request.

Children should not self-register. If you believe a child’s information was supplied without appropriate authority or safeguards, contact us promptly. We will assess and take appropriate action.