When you use OneNest’s services, either via website or the App, you are trusting us with some of your information. We understand this is a big responsibility on our shoulders and we are always working hard to keep your information safe and secure, and give you control over your data. We are already, independently certified for protecting privacy of Personally Identifiable Information (PII) under GDPR readiness, and working on a few other major data privacy certifications. This Privacy Policy section is meant to help you understand what information OneNest collects, why we collect such information and how you have full control to update, manage or delete your information.

Introduction

OneNest is a comprehensive security and community management platform helping millions of users to make their life safe, secure and convenient. Our various services include:

Accounts & Payments Management:
OneNest features an end-to-end accounting module to simplify management of finances for Resident Welfare Associations. Residents can also pay their maintenance bills, via the app.

Helpdesk and Communication:
With OneNest Communication Management, management committee can create meeting notices and residents can have their complaints resolved by raising an issue to the concerned person as well start a discussion, post an idea or provide feedback.

Information OneNest Collects

We would like you to understand that the information collected via the OneNest app or website is to help us provide you with superlative service.

The information OneNest collects, and how that information is used, depends on how you use our services and how you manage your privacy controls. For e.g. for standard OneNest services, only your flat details along with name and number will be needed. However, if your society chooses to use advanced features like Accounts and payments, additional information may be needed to render services..

Information collected on the OneNest app and website:

Residents:
Name, Email address, Mobile number, Secondary Mobile number, your apartment/villa number, tenant or an owner, vehicle number (if any),FastTagID(RFID),vehicle type and vehicle colour.

Service Providers to Society/Individual Homes:
The name, phone number, resident flat , vehicle number (if any). For security reasons, some personally identifiable information of service providers including delivery executives is taken at the gate as per the discretion of the respective RWA and appropriate local laws. Further, certain financial information may be required to facilitate the processing of payments made through our payment service providers. As making payment may require utilization of the services of the payment service providers, you will be subject to the terms of use and privacy policy of such payment service provider, as well.

Additional information:
IP address, Webpages visited (Pages of infimatrix.com visited by the user; a standard practise to optimize user experience and curate content of a website), browser, device and operating system information (including device ID, Android ID, Apple IDFA ID etc.), mobile network information, the date, time, and referrer URL of your request (the website from which the user was redirected to OneNest.com; a standard practice to track and compensate the originator of traffic to OneNest website, such as when a visitor clicks on a Google ad for OneNest.)

Information Collected from Other Sources / Third Parties:

In addition to the above, in light of the COVID Pandemic, Resident, Guest and/or Service Providers to the Society / Individual homes shall have the option to use the Aarogya Setu Mobile App (Aarogya Setu App) to initiate the permission to gain entry into the respective flat / society. If a Resident, Guest and/or Service Providers to the Society / Individual homes use the Aarogya Setu App to gain entry, OneNest shall receive the following information from the Aarogya Setu App upon scanning of the QR Code:
(a) Name
(b) Mobile Number
(c) Risk Category
Individual RWAs may mandate the use of the Aarogya Setu App for gaining entry into the RWA which is totally and solely at the discretion of respective RWAs. We collect standard website access information (type of browser etc) using cookies and other similar technologies on all our websites (OneNest.in, OneNest.com). We do this to measure, improve and personalize our services for you and we do not share this information with any third party organizations for commercial purposes. We don’t sell or trade user information in any form to anyone. The information is used solely for the purpose of enabling services and making your experience better on OneNest platforms. On a case to case basis we give you great value add from third party partners where information will be shared after your explicit consent. Should you wish to know more about our policy on guest visitors’ data, click here OneNest’s services are an extension of the services offered by the Resident Welfare Association (RWA) (being our direct customer) of the premises. The RWA members will have access to all the information collected for their society on OneNest for recording and security purposes. In case any of the RWA members access any of resident data, OneNest will transparently convey the same to the user along with the reason for access of the information.

How The Information is Collected

OneNest provides its services through our website and mobile app (will be collectively referred to as “Platforms”). User information is collected via our platforms either directly or indirectly to give great product and service experience.

Direct Information: All personally identifiable information as mentioned in “Information OneNest Collects” segment is explicitly collected on the platform where the society manager fills society member details and give necessary consent to be contacted or their information to be used by OneNest for serving them better via the platforms. We do not consider personal information to include information that has been made anonymous or aggregated so that it can no longer be used to identify a specific person, whether in combination with other information or otherwise.

Indirect Information: Information like IP address, device data, browsing data and other information as detailed in “Information OneNest Collects” is collected while the user is interacting with our platform. The same is collected to make user experience on our platforms better. Such non-personally identifiable information (non-PII) may also be provided to third party advertisers to ascertain your interests and serve advertisements on third party platforms.

Why The Information is Collected

We use information collected from users to provide our services. The data is collected on OneNest website as per discretion and inputs given by society manager. On the mobile app information is collected as per our agreement with RWA of societies who act as an extended service provider to all residents within the society.

Following are the key services which will require information collected
Account set up and administration
Verification of your account
Personalization of content, business information or user information
Periodically communicate with you (like new feature/benefits introduction, newsletters, contests, feature usage guidance, compliance requirements, offerings, etc.)

Use by third party advertisers of information to provide interest-based advertisements on third party platforms. No personally identifiable information is shared by OneNest without consent from the User.
To provide accurate insights to Users
To provide additional value-added services that you may avail from OneNest
User Privacy Controls
OneNest ensures that you are in full control of the information we collect and how it is used.

This section describes key controls for managing your privacy across our platforms and services. In addition to this we also provide few other mechanisms by which users can reach out to us to modify or erase their information available with us.

Managing, reviewing, and updating your information: When you’re signed in, you can always review and update information by visiting the services you use. For example, you can change your contact details such as your name, email and phone number.

Choice to Opt-out: We provide all users with options to opt-out from receiving notifications pertaining to Payments. This can be done directly on our platform. The opt-out may not apply to promotional and marketing messages served by or in partnership with the Resident Welfare Associations or their management committees on the notice boards of the relevant society. For removal of such promotional and marketing messages you may reach out directly to the Resident Welfare Association. Unsubscribing, removing and deleting your information: If you choose to unsubscribe from our platforms or delete any of all of your information, contact the society manager and then uninstall the app. In addition to this you may also send an email to info@infimatrix.com for specific information about your account or deletion of your account history. However, such deletion of specific information may require the approval of the Society Manager and we may still retain some information and records of transaction for specific period as required by any law, contract with Society or policy as applicable.

Sharing Your Information and Disclosures

We may disclose personal information that we collect or you provide, as described in this privacy policy, in the following ways:

For General Information Disclosures:

To our subsidiaries and affiliates, which are entities under common ownership for provision of our Services or to comply with applicable laws.

OneNest uses Third Party Service Providers to provide variety services on our behalf viz., Communications Services (Emails.), Banking Partners, Payment Gateways, Analytics Platform, Cloud Services, etc. and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

When user reaches out to OneNest customer care for specific query/issues and customer care personnel has to access your information for resolution of your query.

Explicit user consent will be taken by OneNest in case we partner with third-party companies, organisations, or individuals outside of OneNest to provide additional services or offerings to users. The use of such services may require you to share your name, email, phone number, flat details, vehicle number or other information with these partners. In such cases, OneNest will only share your information and offer you the service with your explicit opt-in. The services may contain links to third-party websites. Please be aware that we are not responsible for the content or privacy practices of other websites or services which may be linked on our services. We do not endorse or make any representations about third-party websites or services. Our Privacy Policy does not cover the information you choose to provide to or that is collected by these third parties.

For Legal Reasons:
We may need to share or disclose some of your information outside OneNest without the consent, if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonable necessary in the following events:

Meet any law, regulation or legal process as applicable or enforceable request from government.

To enforce applicable terms of service, including investigation of potential violations, fraud, security or technical issues/breaches.

Information as necessary with your respective societies’ RWA as per terms of agreement.
Protect against harm to the rights, property or safety of our users, OneNest, or the public as required or permitted by Law.

Consent: In some cases, we may process some of your information based on the consent you granted to your RWA as represented by them to OneNest or expressly to us at the time we collect such data. In case we need to process any of your information we will be clearly indicating to you at the point and time of collection. By using OneNest or any other domain owned by us, you are authorizing OneNest (including its representatives, affiliates, and its business partners) to contact you via via email, phone call, push notification, WhatsApp or SMS and offer you our services for the product you have opted for, imparting product knowledge, offer promotional offers, for which your information may be collected in the manner as detailed under this policy. You hereby agree that you authorise OneNest to contact you for the above mentioned purposes even if you have registered yourself under DND or DNC or NCPR service(s). Your authorization, in this regard, shall be valid as long as your account is not deactivated.

You have right to withdraw your consent at any given point of time either via platform or writing to us at info@infimatrix.com. If you withdraw your consent, then we will stop processing the relevant Personal Information except to the extent that we have other grounds for processing such Personal Information under applicable laws.

Your information will be shared with another business entity should we(or part of our business/assets) plan to merge with, or be acquired by another business entity or in cases of organisation restructuring or amalgamation. In case of such a transaction or re-organization the new business entity will follow this Privacy Policy. All the affected users will be notified before personal information is transferred or becomes subject to different entities’ privacy policy.

Your Information Security

We build security into each and every system and services to protect your information.

All OneNest platforms and processes are built with strong security features that continuously protect your information. We have multiple real time checks and tests running to help us detect and automatically block security threats from ever reaching you. In case of any detection of threat or risk that we deem you should be aware of; we will notify you and guide you through steps to keep your privacy protected.

We are constantly striving to protect your data from unauthorised access, disclosure, modifications, or destruction of any information we hold, including:

All information going in and out of the app is 256 bit https encrypted. TLS encryption is used throughout the application for data in motion and data is also encrypted at rest.

All information is stored in servers with best in class firewalls and needs multiple authentications for any access and no unauthorised person will have access to the same.

We constantly review our information collection, storage and processing practices, including physical security measures, to prevent unauthorised access to our systems.

We restrict access to personal information to employees, and external contractors who may need the information in order to process some services. Any internal employee with this access is subject to strict contractual confidentiality obligations and strict actions (up to termination or criminal action) will be taken if they fail to meet these obligations.

The OneNest app is and audited on a regular basis. OneNest application and data servers do not use public accessible addresses or IP. The access is further secured through a VPN tunnel with 2FA (two factor authentication). All traffic is routed through a WAF (Web Application Firewall) and is checked strictly for malicious traffic.

However, we would like you to understand and accept that data transmission over the internet may be liable to risk and we would assume no liability for any disclosure of information due to errors in transmission issues or unauthorised third-party access to our platforms or databases.

You acknowledge that as a registered user you are responsible for maintaining the security of your Account such as your Account login credentials and passwords, and that you should not provide these credentials to any third party. If it comes to your knowledge that or if you have reason to believe that your Account credentials have been stolen or been made known to others, you must contact us immediately at info@infimatrix.com. You acknowledge that you are responsible for all acts done, using your Account login credentials. We are not responsible if someone else accesses your Account on account of your failure to maintain security of your Account credentials.

Your Information Retention and Deletion

The information collected on our platforms is retained for different periods of time depending on what the information is and how it is used and how you configure your settings.

Users can request to export a copy of their information or delete it from your OneNest account at any given point of time (some information deletion may be subject to RWA approval, OneNest will facilitate the approval process):

All the visitors’ information is retained for a specific period of time (period beyond which the data is deemed not to be reasonably necessary for operation or by law) and this interval will be as per the discretion of the societies’ RWA. Residents may request at any time that their data on OneNest systems be erased. This is referred to as the Right to be Forgotten and can be triggered from the OneNest app or by writing to info@infimatrix.com.

Guest visitors can get their details deleted at any given point of time. Details for the same are covered in “Role and details of Data Protection Officer”.

We keep some data until your society is live on OneNest and all such information is deleted if your society no longer live on our platform.

In case you have left a society on OneNest, society manager can delete all your details on our App. In case of more assistance you can write to info@infimatrix.com.

However, some data we may retain for longer period of time when necessary for legal purposes, such as security, fraud or financial record keeping.

When you delete data or request for deletion of data, we follow a process to make sure that all your data is safely and completely removed from all our servers. We also ensure that none of your information is subject to accidental or malicious deletion.This may lead to some delay between actual requests made and final deletion as we ensure that information deletion is genuine and not accidental from our active and backup systems.