Privacy Policy

Last Updated: March 2026

1. Data Ownership & Roles

The Piya Hill View Welfare Society Executive Committee (EC) is the Data Controller. The MyPHV Connect platform acts solely as a Data Processor. The Society owns 100% of the data collected.

2. Information Collection

• Residents: Names, flat numbers, and contact details for account creation (limited to one account per flat).
• Staff & Visitors: Names, vehicle numbers, and entry/exit timestamps for security logging.
• Transactions: UTR/Transaction IDs and payment screenshots. Note: We do not process live payments; we only log proofs of transfer.

2. Data Access Control (RBAC)

We use a Role-Based Access Control mechanism:

• Residents: View personal profile, personal payment history, and public notices.
• Society Admin: Access to manage finances, verify proofs, and update society records.
• Security Level: Segregated minimalist interface for visitor/staff logging only.

3. Security & Storage

Data is stored in Google Cloud using enterprise-grade AES-256 encryption at rest. All data transmission is secured via HTTPS (SSL/TLS). Our decoupled architecture ensures that data remains safe even if the frontend interface is interrupted.

4. Retention & Deletion

• Financial records are retained for 1 years for audit purposes.
• Visitor logs are archived every 6 months.
• Residents may request data correction through the Society Admin.

5. Special Data Categories

• Pet Registration: We may collect pet photos and vaccination statuses. This data is used solely for community health safety and identifying pets in case of emergencies.
• Visitor Management: Name, phone number, and vehicle details of delivery executives are collected at the gate. Domestic help can be pre-registered by owners/residents through portal. Guests and pre-registered visitors are required to share Visitor ID(if available) or Name, Vehicle Number(if any) and host flat number only. This data is treated as "Transit Data" and is not used for marketing.
  Resident visitor data is encrypted and strictly restricted. Access is granted to executive committe only following a formal written request or in response to a documented security incident. All formal requests will be notified to the flat owner associated with the data being retrieved.
• Hall Booking: We collect event types and guest counts to ensure society resources (elevators, electricity, security) are managed appropriately.

6. Automated Data Purging

To ensure your privacy, Visitor Logs and Staff Entry/Exit timestamps are automatically purged from our active database every 180 days. Only anonymized count data is kept for long-term security auditing.