Privacy policy

This policy explains what personal data LEVILLIO TECHNOLOGIES (“we”, “us”) handles, why, how we protect it and how you can ask us to correct or delete it. It covers this website and the software platform we provide to PG owners, hostel managers and property owners (our “customers”).

Who we are

LEVILLIO TECHNOLOGIES is a proprietorship registered in India under Udyam, based in __CITY_STATE__. You can reach us at contact@levilliotechnologies.com.

Whose data, and who decides

• Our customers' own accounts. For the details of the owners and staff who use the platform, we decide how the data is used, as described here.
• Data our customers keep about their residents and visitors. A PG owner decides what they record about their residents and why. For that data the owner is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023, and we process it on the owner's behalf and only on their instructions.

What we collect

From customers

• Name, email address and mobile number of the owner and of each staff member given a login.
• Business name, property names and addresses, room and bed details, photos and the content of each property's website.
• Billing and invoicing details for our service.

Recorded by customers about their residents

• Name, mobile number, email address and emergency contact.
• Room and bed, stay dates, rent, deposit, bills, payments, receipts and notices.
• Reviews that residents choose to write, which the owner approves before they appear on the property's website.

From visitors to a property's website

• The details a visitor types into an enquiry, such as name, phone number and message.

When anyone signs in

• IP address, browser, and the time of sign-ins and important actions, kept in security and audit logs.

WhatsApp Business Platform (planned, not yet available)

We are building an optional feature that lets a customer connect their own WhatsApp Business Account through Meta's APIs. It is not live today. When it is, and only for customers who connect their account, we will process:

• The customer's WhatsApp Business Account ID, phone number ID, display phone number and business name, and the access token Meta issues for that account.
• Messages sent and received through that account, the phone numbers and profile names of the people in those conversations, message status updates (sent, delivered, read, failed) and timestamps.

Data obtained through Meta's APIs (“Platform Data”) is used only to provide and maintain the service the customer asked for, to protect accounts and to troubleshoot problems. Each customer reaches only their own WhatsApp account and conversations.

On this website

This website sets no cookies and runs no analytics, advertising or tracking scripts. Our hosting provider processes your IP address to deliver the pages and to protect them from attacks.

How we use it

• To provide the platform: floor plans, residents, bills, receipts, reports, property websites and the resident portal.
• To keep accounts safe: sign-in codes, alerts about unusual access, and investigating misuse.
• To send service emails, such as sign-in codes, password resets and, on a customer's behalf, bills and receipts to their residents.
• To give support and fix problems.
• To meet our legal, tax and accounting obligations.

We do not sell personal data. We do not use it for advertising, and we do not use Platform Data or residents' data for any purpose unrelated to the service.

Who we share it with

• Service providers that run the platform for us. Amazon Web Services hosts the platform and sends its emails. When the WhatsApp feature is live, messages for a connected account pass through Meta Platforms.
• The customer who controls the data. A resident's data is visible to their own PG owner and the staff that owner allows, and to no other customer.
• Authorities, when Indian law requires it.

Where it is stored

The platform's data is stored on Amazon Web Services in its Asia Pacific (Hyderabad) region in India. This website's pages are delivered through Amazon CloudFront, which serves them from locations near each visitor.

How we protect it

• All connections use HTTPS.
• Each business has its own sign-in address; accounts work only there, and every request is checked against the business it belongs to.
• Owners and staff sign in with a password and a 6-digit code sent to their email. Passwords are stored only as Argon2id hashes.
• Owners choose what each staff member can see, down to a single branch.
• Access tokens and other credentials are kept on our servers, encrypted, and are never shown in the browser.
• Important actions are recorded in audit logs, and backups are kept so data can be restored.

No system is perfectly secure. If a breach affects personal data, we will inform the affected customers and the Data Protection Board of India as the law requires.

How long we keep it

We keep a customer's data, including their residents' data, while their account is active. When a customer closes their account, we delete or anonymise that data, except records that the law requires us to keep, such as tax and accounting records, which we keep only for as long as required. When a customer disconnects a WhatsApp Business Account, we delete its access token and stop receiving its messages.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask to see a summary of the personal data held about you, ask for it to be corrected or completed, ask for it to be erased, withdraw consent you gave, and nominate someone to act for you.

• Residents and visitors: your PG owner decides what is recorded about you, so please ask them first. You can also write to us and we will pass your request to the right owner and help them complete it.
• Customers: write to us from the email on your account.

See how to ask for deletion. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Children

The platform is for businesses. We do not knowingly collect data directly from children. A customer who records a resident under 18 must have the consent of that resident's parent or guardian.

Changes to this policy

We will post any change on this page with a new effective date. If a change affects how customer data is used, we will tell customers by email before it applies.

Contact and grievances

For questions, requests or complaints about personal data, email contact@levilliotechnologies.com with “Privacy” in the subject.