Privacy Policy
Effective date: 28 September 2026
This Privacy Policy explains how TODO: exact registered business name as printed on PAN / GST / Udyam certificate ("Atithi", "we", "us") collects, uses, shares and protects personal data when you use the website https://atithiliving.com, the Atithi web application, and our WhatsApp channel (together, the "Service"). We act as a Data Fiduciary under the Digital Personal Data Protection (DPDP) Act, 2023, and follow the Information Technology (IT) Act, 2000 and the rules made under it.
1. Data we collect
| Category | Examples | Why |
|---|---|---|
| Identity and contact | Name, mobile number, email, photograph | Create your account, communicate with you |
| Know Your Customer (KYC) data | Government-issued ID details, verification result | Verify tenant identity at the owner's request, meet police-verification and legal obligations |
| Stay details | Property, room, bed, move-in and move-out dates, agreement | Run the tenancy |
| Payment data | Amount, date, UPI (Unified Payments Interface) reference, payment status | Record rent and subscription payments |
| Messages | WhatsApp and in-app messages with Atithi | Deliver notifications and support |
| Technical data | IP (Internet Protocol) address, device and browser type, error logs | Security, fraud prevention and fixing faults |
We do not collect or store full card numbers, CVV (Card Verification Value), UPI PINs (Personal Identification Numbers) or net-banking passwords. These are handled only by our payment partners.
2. Legal basis and consent
We process personal data on the basis of your consent, given when you sign up or accept an invite, and for legitimate uses permitted by the DPDP Act, 2023, including compliance with law. You may withdraw consent at any time by writing to grievance@atithiliving.com. Withdrawal does not affect processing already done, and some records must be kept by law (see section 6).
3. How we share data
We do not sell personal data. We share it only with:
- The PG owner of the property you stay in or apply to, and, where you agree, your parent or guardian.
- Data Processors acting on our instructions: payment processing (Razorpay), identity verification (Cashfree), messaging (Meta Platforms' WhatsApp Business Platform and its authorised Business Solution Providers), cloud hosting and databases, and error monitoring.
- Authorities when required by law, court order or police verification rules.
4. WhatsApp and Meta
If you message Atithi on WhatsApp, Meta Platforms processes those messages under WhatsApp's own terms and privacy policy. We use WhatsApp only to send service messages you have opted into (invites, rent reminders, payment confirmations, notices) and to answer your queries. Reply STOP at any time to opt out of non-essential messages. To remove data received through Meta products, see our Data Deletion page.
5. Storage and security
Data is stored on secured cloud infrastructure with encryption in transit (HTTPS/TLS — Transport Layer Security), role-based access so owners only see their own properties, and audit logs. No system is perfectly secure; if a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the law requires.
6. Retention
We keep personal data only while your account is active and for as long as needed for the purposes above. After account closure we delete or anonymise data within 30 days, except records we must keep by law, such as payment and tax records (kept for up to 8 years under the Income Tax Act and GST — Goods and Services Tax — law) and tenant verification records required by local authorities.
7. Your rights
You have the right to: access a summary of your data; correct or update it; erase it (subject to section 6); withdraw consent; nominate another person to exercise these rights in case of death or incapacity; and raise a grievance. Email grievance@atithiliving.com from your registered email or phone number. We respond within 30 days.
8. Children
The Service is intended for adults. Where a tenant is under 18, the account must be created and consented to by a parent or lawful guardian, and we do not use children's data for tracking, behavioural monitoring or targeted advertising.
9. Cookies
This website uses only essential cookies needed for it to function and for signed-in sessions in the application. We do not use advertising cookies.
10. Grievance Officer
Sonal Priya, Founder and Chief Technology Officer
TODO: exact registered business name as printed on PAN / GST / Udyam certificate
TODO: building / street, TODO: locality, Ranchi, Jharkhand TODO: 6-digit PIN, India
Email: grievance@atithiliving.com · Phone: TODO: +91 XXXXX XXXXX
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Changes
We will post any change to this policy on this page with a new effective date, and notify registered users of material changes.