VAASYO by BytesIndiaVAASYOby BytesIndia
← Back to Home

Privacy Policy

Last updated: June 2, 2026

1. Introduction

VAASYO is a product owned, developed, and operated by BytesIndia ("we", "us", or "our"). We operate the VAASYO PG & Hostel Management Platform accessible at vaasyo.com and app.vaasyo.com (the "Service"). This Privacy Policy explains how BytesIndia collects, uses, discloses, and safeguards your information when you use our Service, including our integration with Meta (Facebook) and WhatsApp platforms.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Phone number, name, and property details when you register and set up your account.
  • Property Data: PG/hostel name, address, room configurations, bed counts, and rent amounts.
  • Tenant Information: Tenant names, phone numbers, room assignments, rent status, and check-in/check-out dates that you enter into the system.
  • Payment Information: Rent payment records, UPI transaction references, and payment history.
  • Complaint Data: Complaint descriptions, photos, and resolution status submitted by tenants or owners.

2.2 Information Collected Automatically

  • Device Information: Browser type, operating system, device type, and screen resolution.
  • Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
  • Log Data: IP address, access times, and referring URLs.

2.3 Information from Third-Party Services

  • Firebase Authentication: Authentication tokens and phone number verification status from Google Firebase.
  • WhatsApp Business Platform (Meta): Message delivery status, read receipts, and phone number verification for sending rent reminders and notifications to tenants.
  • Razorpay: Payment confirmation status and transaction IDs (we do not store full card or bank account details).

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide PG/hostel management features including tenant tracking, rent management, vacancy monitoring, and complaint resolution.
  • WhatsApp Notifications: To send automated rent reminders, payment confirmations, complaint updates, and other operational notifications to property owners and tenants via the WhatsApp Business API.
  • Authentication: To verify your identity and secure your account using OTP-based phone verification.
  • Payment Processing: To facilitate rent collection via UPI auto-pay and manual payment links through Razorpay.
  • Analytics & Improvement: To understand usage patterns and improve our Service (using PostHog analytics).
  • Customer Support: To respond to your inquiries and provide technical assistance.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. WhatsApp & Meta Platform Data Usage

Our Service integrates with the WhatsApp Business Platform (operated by Meta) to send operational notifications. Specifically:

  • We use tenant phone numbers solely to send rent reminders, payment confirmations, and complaint status updates via WhatsApp.
  • We access WhatsApp message delivery and read receipt data only to confirm notification delivery status.
  • We do not sell, share, or use WhatsApp data for advertising, marketing to third parties, or any purpose unrelated to the core Service functionality.
  • We do not use data obtained from Meta platforms to build user profiles for advertising or to transfer data to data brokers.
  • WhatsApp message templates are pre-approved by Meta and used exclusively for transactional/utility purposes.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information only in the following circumstances:

  • Service Providers: With trusted third-party services that help us operate the platform (Firebase for authentication, Meta/WhatsApp for messaging, Razorpay for payments, Cloudinary for image storage, Supabase for database hosting, Sentry for error monitoring, PostHog for analytics).
  • Property Owners & Tenants: Tenant information is visible to the property owner who manages that tenant. Complaint data is shared between the tenant who filed it and the property owner.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to users.

6. Data Storage & Security

  • Data is stored on secure cloud infrastructure with encryption at rest (AES-256) and in transit (TLS 1.2+).
  • Sensitive fields (Aadhaar numbers, bank details) are encrypted at the application level using AES-256-GCM with versioned keys.
  • Access to production systems is restricted to authorized personnel with multi-factor authentication.
  • We implement rate limiting, input validation, and SQL injection prevention as standard security measures.
  • Regular automated backups are maintained with point-in-time recovery capability.

7. Data Retention

  • Account data is retained for as long as your account is active.
  • Tenant records are retained for the duration of the tenancy plus 12 months after check-out for reference purposes.
  • Payment records are retained for 7 years as required by Indian tax and financial regulations.
  • Analytics data is anonymized after 90 days.
  • Upon account deletion request, personal data is permanently removed within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Data Portability: Request your data in a structured, machine-readable format.
  • Withdraw Consent: Opt out of non-essential communications at any time.
  • Complaint: Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, contact us at privacy@vaasyo.com or message us on WhatsApp.

9. Cookies & Tracking

  • We use essential cookies for authentication session management and language preference storage.
  • We use PostHog for product analytics to understand feature usage (no advertising trackers).
  • We do not use third-party advertising cookies or retargeting pixels.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.

11. International Data Transfers

Your data may be processed by third-party service providers located outside India (e.g., Firebase servers, Cloudinary CDN). Where such transfers occur, we ensure appropriate safeguards are in place through contractual obligations with these service providers to protect your data in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

VAASYO is a product owned and operated by BytesIndia from Patna, Bihar, India.