DPDP Act, 2023 & IT Rules Compliant

Privacy Policy & Data Protection Notice

Last Updated: September 2026 • Effective for all residents, committee members, and visitors of societies powered by NestLog.AI

Trade Name NestLog.AI
GSTIN 27KJDPS7449H1ZG
MSME UDYAM Registration UDYAM-MH-26-1219980
Service Reach Pan-India Coverage (All Indian States & UTs)
Registered Office Address ITrend Life, Shani Mandir Road, Wakad, Pune - 411057, Maharashtra, India
Strict Non-Monetization Pledge: NestLog.AI does not sell, rent, monetize, or trade resident contact numbers, flat directories, or visitor logs to advertisers, data brokers, or marketing agencies. Your housing society records remain strictly isolated to your society.

1. Roles Under the Digital Personal Data Protection (DPDP) Act, 2023

In the context of the Digital Personal Data Protection Act, 2023 (India) and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

  • Data Fiduciary: Your Registered Co-operative Housing Society (CHS), Apartment Owners Association (AOA), or Resident Welfare Association (RWA) is the Data Fiduciary that determines the purpose and scope of collecting resident, vehicle, and visitor data.
  • Data Processor: NestLog.AI acts as the Data Processor, providing the secure cloud infrastructure, mobile APIs, and database partitions strictly in accordance with documented instructions from the society's Managing Committee.
  • Data Principal: Residents, owners, tenants, committee members, domestic staff, and visitors whose personal data is processed within the platform.

2. Categories of Data Collected and Processed

To deliver society management, security, and accounting services, the platform processes the following data categories:

Data Category Specific Data Points Operational Purpose Retention & Purge Schedule
Resident Profiles Name, Mobile Number, Email Address, Wing & Flat Number, Occupancy Status (Owner/Tenant). Maintenance invoice generation, digital receipts, AGM notices, emergency alerts, gate approvals. Maintained for active tenancy/ownership. Anonymized upon verified society offboarding.
Visitor Logs Visitor Name, Mobile Number, Destination Flat, Check-in/Check-out Timestamps, Entry Photo (optional). Gated security verification, delivery parcel management, safety audit trail. Automatic rolling purge: Records permanently purged after 90 days.
Vehicle Records Vehicle Type (2W/4W), Registration Plate Number, Allocated Parking Slot. Parking slot dispute prevention, unauthorized parking detection, security oversight. Retained while vehicle is registered with the society.
Financial Ledgers Dues, Maintenance Bills, Transaction References (UTR / Gateway ID), Payment Mode. Statutory society audit under applicable State Co-operative Societies / Apartment Ownership Acts across India. Preserved for 7+ years in compliance with statutory co-operative audit mandates.

3. Direct Settlement & Payment Data Architecture

Zero-Escrow Model: NestLog.AI does NOT operate an intermediary escrow or pooled wallet. Resident maintenance payments made via UPI, Net Banking, or Payment Gateway settle directly into the verified bank account of the Housing Society.

NestLog.AI does not collect, store, or process full credit card numbers, debit card PINs, or net banking passwords. All payment transactions are processed through RBI-authorized Payment Aggregators (e.g., Razorpay, Cashfree, or UPI Network) using industry-standard PCI-DSS Level 1 compliance.

4. Technical Safeguards & Encryption

  • Encryption in Transit: All web and mobile communications enforce TLS 1.3 encryption (HTTPS / WSS).
  • Encryption at Rest: Database volumes and document storage are encrypted using AES-256 standards.
  • Tenant Isolation: Data between different housing societies is strictly separated using isolated multi-tenant schemas.
  • Role-Based Access Control (RBAC): Society security guards cannot view resident financial ledgers; committee members cannot access resident private passwords.

5. Your Rights as a Data Principal

Under the DPDP Act, 2023, you are entitled to:

  1. Right to Summary & Information: Request a summary of personal data being processed.
  2. Right to Correction & Erasure: Request correction of inaccurate resident details or erasure of non-statutory data upon vacating the premises.
  3. Right of Grievance Redressal: Submit inquiries directly to our designated Grievance Officer.
  4. Right to Nominate: Nominate an individual to exercise data rights in the event of death or incapacity.

6. Contact Us & Grievance Officer

For data privacy inquiries, consent withdrawals, or compliance notices, please contact our designated Grievance Redressal Officer:

Entity Name: NestLog.AI

Company / Domain: nestlog.in

Email: contact@nestlog.in

Support Helpline: +91 9XXXXXXXXX (Mon–Sat, 9:00 AM – 6:00 PM IST)

Terms of Service Refund & Cancellation Policy About NestLog.AI

Please Confirm

Are you sure you want to proceed?

Privacy Consents (DPDP Act)

×

Under the Digital Personal Data Protection (DPDP) Act, 2023, you can grant or withdraw consent for data processing.

General Platform Operations Not Consented

Required for core functionalities (complaints, announcements, visitor check-in, bookings, ledger records). If withdrawn, you will be logged out and locked from the app.

AI Data Processing Disabled

Allows processing of text by Groq AI (with PII scrubbing) for drafting tickets and getting suggestions. If disabled, the application continues to function normally without AI features.

Activity Logs

0 logs

Loading activity logs...

Essential Session Cookies Security & DPDP Act 2023 Compliance

NestLog uses strictly necessary session cookies to keep you signed in securely, protect transactions with CSRF tokens, and remember your display preferences. We do not use third-party advertising, commercial tracking, or marketing cookies.

How We Protect Your Privacy

Plain-language guide to session cookies on NestLog.ai

100% Zero-Ad Guarantee: Unlike other gate and society apps, NestLog never tracks your browsing across other websites, never sells your phone number, and never displays third-party ads.
1. Keeping You Signed In Securely
A temporary digital sign-in key (session) keeps your flat account active as you view notices, bills, and visitor requests. Without this, you would have to re-enter your password on every single click.
2. Protecting Your Payments & Requests
Protective security tokens (csrf_token) verify that when you pay maintenance dues, approve a visitor, or submit a complaint, the action strictly comes from you and cannot be manipulated or forged by external websites.
3. Remembering Your Display Settings
Remembers your preferred dark or light appearance, optional 30-day device sign-in, and notes that you have acknowledged this privacy policy so it won't ask you again.
Why can't essential cookies be turned off?
These functional cookies do not collect personal profiles. They are necessary to operate your resident account safely under Section 5 of India's Digital Personal Data Protection (DPDP) Act, 2023. If session cookies are blocked in your browser settings, you will not be able to log in.
Read Grievance & Privacy Policy