Privacy Policy
Last updated: June 2026 · Effective date: June 2026
1. Who we are
Beapr (“we”, “our”, or “us”) is a residential society management platform operated in India. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our web application at beapr.com.
We are committed to complying with the Digital Personal Data Protection (DPDP) Act 2023and the Information Technology Act 2000 and the rules made thereunder.
2. Data we collect
| Category | Examples |
|---|---|
| Identity | First name, last name, profile picture |
| Contact | Email address, phone number |
| Property | Flat number, society name, street address |
| Documents | Uploaded proof documents (PDF/image); Aadhaar last-4 digits (optional) |
| Vehicle | Registration number, vehicle type, make/model/colour |
| Payment | Invoice amounts, payment method, payment reference ID (no card numbers stored) |
| Usage | Login timestamps, page views, error logs (via Sentry) |
3. Why we collect it
- To manage your society membership and flat ownership/tenancy
- To generate and send monthly maintenance invoices
- To verify your identity during the signup approval process
- To process online payments via Razorpay
- To send important notices and announcements from your society
- To monitor service health and fix errors (Sentry error monitoring)
4. Who we share it with
- Supabase / Railway — infrastructure hosting and database storage
- Cloudflare R2 — document and image file storage
- Sentry — error monitoring (anonymised where possible)
- Razorpay — payment processing (governed by Razorpay's own privacy policy)
- Your Society Administrator — to verify and manage your membership
We do not sell your personal data to third parties. We do not share data with advertisers.
5. Data retention
Your data is retained for as long as your account is active. If you delete your account or your society administrator removes you from the platform, your personal data will be deleted or anonymised within 30 days, except where retention is required by law (e.g. payment records for tax/audit purposes, retained for up to 7 years).
6. Your rights under the DPDP Act 2023
- Access — request a copy of the personal data we hold about you
- Correction — update incorrect or incomplete data via your profile page
- Deletion (erasure) — request that we delete your account and associated data
- Grievance redressal — raise a complaint if you believe your data has been misused
To exercise any of these rights, email us at info@beapr.com. We will respond within 30 days.
7. Cookies and local storage
We use a secure, httpOnly session cookie to keep you signed in — it cannot be read by JavaScript and is only sent to our servers. Your account/profile details (name, role) are cached in browser localStorage so the app loads instantly, but this never includes your password or session token. We do not use third-party tracking cookies. Sentry may set a session cookie for error correlation.
8. Security
We use industry-standard security measures including HTTPS/TLS encryption in transit, hashed passwords (bcrypt), JWT-based authentication, rate limiting, and Content Security Policy headers. Uploaded files are validated for type and size before storage.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the notice board inside the app. Continued use of the platform after such notice constitutes acceptance of the updated policy.
10. Contact us
For any privacy-related queries or to exercise your rights under the DPDP Act 2023:
Email: info@beapr.com