Privacy Policy

Plinth is a product of Ditador Labs LLP, a company registered in India. We provide a digital governance platform for residential housing societies. When this policy refers to "Plinth", "we", "us", or "our", we mean Ditador Labs LLP.

Questions about this policy can be directed to privacy@plinth.life.

We collect only what is necessary to provide the service:

• Account data your email address and, if you choose to provide it, your full name and phone number. Email is used to authenticate you and send important notifications. We do not collect passwords; authentication is via one-time codes sent to your email.
• Flat and society data your flat number, block, and society membership, provided by your society administrator or entered during onboarding.
• Vote receipts a record that you voted on a given poll, the weight applied, and the timestamp. For secret ballots, your specific choice is never stored in a way that links it back to you.
• Comments and reactions any comments or emoji reactions you post on polls. These are visible to other members of your society.
• Credential documents ownership proof documents you optionally upload when required by your society for certain polls. These are stored in a private encrypted bucket accessible only via short-lived signed URLs, and automatically deleted after the retention period.
• Device tokens if you enable push notifications, we store a device token to deliver them. These tokens are deleted when you sign out or delete your account.
• Usage statistics anonymous, aggregated analytics (page views, feature usage patterns, error rates). These contain no personally identifiable information, are never linked to your account, and are used solely to improve the product.

• To authenticate you and provide access to your society's polls and features.
• To send transactional notifications vote confirmations, poll reminders, claim status updates, and society announcements via email, SMS, or push notification. We do not send marketing or promotional messages.
• To enforce one-vote-per-flat integrity and prevent duplicate voting.
• To display your name on comments you post and associate reactions with your account.
• To maintain an append-only audit trail for your society's governance records.
• To improve the platform using anonymous, aggregated usage data.

We do not use your personal data for advertising, profiling, or any purpose not listed above.

We do not sell your personal data. We do not share your data with third parties for marketing purposes.

We may share data in the following limited circumstances:

• Within your society society administrators can see member lists, claim requests, and poll participation counts. They cannot see the content of secret ballots.
• Service providers we use Supabase (database and authentication), Brevo (transactional email), and Vercel (hosting). These providers process data on our behalf under data processing agreements and may not use your data independently.
• Legal requirement if required by applicable law, court order, or government authority in India.

Different categories of data are held for different periods based on their purpose and our legal obligations:

• Account data (name, phone, email) your name and phone are removed immediately when you delete your account. Your email address is pseudonymised in our authentication system within 24 hours of the deletion request.
• Vote records retained for the lifetime of the society's account. Votes are the authoritative governance record of a poll and cannot be deleted without invalidating the ballot. Your name is not attached to your vote in secret ballots.
• Comments the content of your comments is removed immediately on account deletion. A placeholder ("This comment was removed.") remains in the thread to preserve the conversation structure for other members.
• Reactions deleted immediately on account deletion.
• Credential documents automatically purged 30 days after the relevant poll closes (configurable per society, minimum 7 days). Storage files and database records are both deleted.
• Flat ownership records your society's member roster (name, email, phone as provided by the administrator) is a business record held by the society under cooperative governance obligations. This data is retained for as long as the society account is active and is managed by the society administrator, not Plinth. Deleting your Plinth account unlinks you from the roster entry but does not erase the roster record itself; contact your society administrator to update or remove it.
• Audit log governance and security event records are retained for 7 years to meet legal and cooperative compliance requirements, after which they are purged. After your account is deleted, audit entries reference only an anonymous identifier with no link back to your name or contact details.
• Push notification tokens deleted immediately on account deletion or sign-out.
• Society data deleted within 30 days of a society account deletion request.

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Credential documents are stored in a private bucket accessible only via short-lived signed URLs. Votes are written only through server-side functions clients cannot directly write to the votes table. Every state-changing action is logged to an append-only audit log.

Despite these measures, no system is 100% secure. We will notify affected users and relevant authorities promptly in the event of a data breach.

You have the following rights over your personal data:

• Access request a copy of the personal data we hold about you. You can also download it yourself at any time from Profile → Privacy & data → Download my data.
• Correction ask us to correct inaccurate data, or update your name and phone number directly in your profile.
• Deletion (right to be forgotten) delete your account and personal data yourself at any time from Profile → Privacy & data → Delete my account. What happens when you delete:
  • Immediately: your name, phone number, and email are removed from your profile; your comment content is wiped; your reactions, memberships, push tokens, and pending notifications are deleted.
  • Within 24 hours: your email address in our authentication system is pseudonymised so it can no longer be used to sign in or identify you.
  • Retained: vote records (ballot integrity your identity is not attached to secret ballot choices); anonymised audit log entries (governance compliance); the society's flat roster record (managed by the society administrator, not Plinth).
• Portability download your data in JSON format from Profile → Privacy & data → Download my data.
• Restriction ask us to pause processing of your data while a dispute is being resolved.
• Objection object to processing where we rely on legitimate interests as the legal basis.

Self-service deletion and data export are available directly in the app. For all other rights requests, or if you have questions, email us at privacy@plinth.life. We will respond within 30 days.

Plinth uses only strictly necessary cookies and browser storage (localStorage) to maintain your session and remember your active society. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

Plinth is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify users by email and by posting the updated policy on this page with a revised "Last updated" date. Continued use of Plinth after the effective date constitutes acceptance of the updated policy.

Ditador Labs LLP
Hyderabad, Telangana, India
Email: privacy@plinth.life