Privacy policy
Plain words about your data in Nivasta.
Last updated:
This policy explains what Nivasta collects, why, who can see it, and what you can ask us to do. Nivasta is a maintenance, water-billing and community app for apartment societies, run by ("we", "Miracurl"). Each society's committee decides who joins its Nivasta and what it records there; we run the service for them.
What we collect
| Who | What | Why |
|---|---|---|
| Residents (owners, tenants) | Name, mobile number, email (optional), flat, parking slot, vehicle number (if you give one), whether you are owner or tenant | To sign you in, show your home, and send your society's bills and notices |
| Society admins | The same account details, plus what they enter for their society: flats, water meter readings, maintenance amounts, bills, notices | To run the society's billing |
| Everyone | Bills and payment records: amounts, dates, status, and the order and payment reference numbers from Razorpay | To show what is due and paid, and to match payments |
| Everyone | A push-notification token for your phone (only if you allow notifications) | To send bill and payment alerts |
| Everyone | Sign-in codes (OTP): kept only as a one-way hash and removed after they expire. Your password is kept only as a one-way hash | To keep your account safe |
| Website visitors | What you type in the demo form. It opens WhatsApp or your email app to send us; we do not store it on the website | To answer your request |
We do not collect your card, UPI PIN or bank login. Payments happen on Razorpay's checkout, and we only receive the result. The app does not ask for SMS, contacts or location permissions. Your app PIN and fingerprint stay on your phone and are never sent to us.
Who can see your data
- Your society's admins see the residents, flats, readings, bills and payments of their own society.
- Other residents do not see your bills or payments.
- Miracurl staff see society-level information (society, plan, billing status) to run the service. Access to individual accounts is limited to the people who need it to run and support the service.
- We do not sell personal data and we do not show advertising in the app.
Services that help us run Nivasta
| Service | Used for |
|---|---|
| Razorpay | Online payments |
| SMS provider (MSG91) | Sending your sign-in code by SMS |
| Google Firebase Cloud Messaging | Push notifications to your phone |
| Hosting the servers and the database |
These providers receive only what they need for their task (for example, your mobile number for the SMS, or the amount for a payment).
How long we keep it
- Sign-in codes: removed automatically within about two days after they expire.
- Account, bills and payment records: kept while your society uses Nivasta, and afterwards for the period needed for accounts and tax records.
- If your society stops using Nivasta, ask us and we will delete or return its data, except records we must keep by law.
Your choices and rights
You may ask us to show, correct or delete the personal data we hold about you, to withdraw your consent where we rely on it, and to complain. Under India's Digital Personal Data Protection Act, 2023 you also have the right to nominate someone to act for you. Write to from the mobile number or email on your account. Because your society's admins also hold billing records, we may need to talk to them to complete a request. We reply within days.
Grievance contact: , , .
Children
Nivasta accounts are for adults. If a parent or guardian is an owner or tenant, the account is theirs.
Security
We protect data with encryption in transit, hashed passwords and codes, limited admin access and more. See the Security page.
Changes
If we change this policy in a way that matters to you, we will say so in the app or on this page, and show a new "last updated" date.