Privacy Policy
Last updated: October 2026 · Effective date: June 2026
1. Who we are
Beapr (“we”, “our”, or “us”) is a residential society management platform operated in India by Mulberries Tech Pvt. Ltd.. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our web application at beapr.com.
We are committed to complying with the Digital Personal Data Protection (DPDP) Act 2023and the Information Technology Act 2000 and the rules made thereunder.
2. Data we collect
| Category | Examples |
|---|---|
| Identity | First name, last name, profile picture |
| Contact | Email address, phone number |
| Property | Flat number, society name, street address |
| Documents | Uploaded proof documents (PDF/image); Aadhaar last-4 digits (optional) |
| Vehicle | Registration number, vehicle type, make/model/colour |
| Payment | Invoice amounts, payment method, payment reference ID (no card numbers stored) |
| Usage | Login timestamps, page views, error logs (via Sentry) |
3. Why we collect it
- To manage your society membership and flat ownership/tenancy
- To generate and send monthly maintenance invoices
- To verify your identity during the signup approval process
- To process online payments via Razorpay
- To send important notices and announcements from your society
- To monitor service health and fix errors (Sentry error monitoring)
4. Who we share it with
- Cloud hosting, database and file storage providers — to run the platform and store your data securely
- Email, SMS and WhatsApp delivery providers — to send notifications you or your society have enabled
- Error monitoring services — to detect and fix problems (anonymised where possible)
- Your society's payment gateway — to process online payments (governed by the gateway's own privacy policy)
- Your Society Administrator — to verify and manage your membership
We do not sell your personal data to third parties. We do not share data with advertisers.
5. Data retention
Your data is retained for as long as your account is active. If you delete your account or your society administrator removes you from the platform, your personal data will be deleted or anonymised within 30 days, except where retention is required by law (e.g. payment records for tax/audit purposes, retained for up to 7 years).
Sign-in records (the time of each sign-in attempt, the IP address and the browser or device used) are kept for 12 months for security investigations, then deleted automatically.
When you delete your account, you get a confirmation email at the address on file. We also keep a record of the deletion request itself (the date, your email address and your account ID — not the rest of your profile) for 3 years, as proof the request was honoured.
6. Your rights under the DPDP Act 2023
- Access — request a copy of the personal data we hold about you
- Correction — update incorrect or incomplete data via your profile page
- Deletion (erasure) — delete your account yourself from Profile in the app or on the website, or ask us to. How to delete your account
- Grievance redressal — raise a complaint if you believe your data has been misused
To exercise any of these rights, email us at privacy@beapr.com. We will respond within 30 days.
7. Cookies and local storage
We use a secure, httpOnly session cookie to keep you signed in — it cannot be read by JavaScript and is only sent to our servers. Your account/profile details (name, role) are cached in browser localStorage so the app loads instantly, but this never includes your password or session token. We do not use third-party tracking cookies. Sentry may set a session cookie for error correlation.
8. Security
We use industry-standard security measures including HTTPS/TLS encryption in transit, hashed passwords (bcrypt), JWT-based authentication, rate limiting, and Content Security Policy headers. Uploaded files are validated for type and size before storage.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the notice board inside the app. Continued use of the platform after such notice constitutes acceptance of the updated policy.
10. Contact us
For any privacy-related queries or to exercise your rights under the DPDP Act 2023:
Email: privacy@beapr.com