1. Who is responsible for your data
Perimeter is used by housing societies. That means two different organisations handle your information, and the difference matters when you want to exercise a right.
Your society is the Data Fiduciary. It decides what is collected about its residents, staff and visitors, and why. Its managing committee sets maintenance charges, gate policy and who may enter. If you want your data corrected or deleted, your society is answerable for it.
Vijay Joisar (“we”) is the Data Processor. We build and run Perimeter, the software your society uses. We act on your society's instructions and do not use your society's data for our own purposes.
We are separately a Data Fiduciary for a small amount of platform-level data: which societies use Perimeter, how many flats each has, and their subscription and payment status. That is our own business record, not your society's.
Grievance Officer. Each society names one, and their name, email and phone are shown in the app under Settings. They are your first point of contact. If they do not resolve your complaint, you may escalate to the Data Protection Board of India.
2. What we collect, and why
If you are a resident or a committee member
| What | Why | Can you refuse? |
|---|---|---|
| Your name, phone number and flat | To identify you as a member of your society, raise your maintenance bills, and let your guards reach you about a visitor | No. This is the service |
| Photographs of visitors who come to your door | Shown to you so you can decide whether to let them in | No while your account is active |
| Your maintenance bills, payments and receipts | To run your society's accounts, and because co-operative societies are required by law to keep books | No, statutory |
| Complaints, notices, polls and events you take part in | The community features you chose to use | Only by not using them |
| Your vehicles, pets and household members, if you add them | Gate recognition, and your society's records | Yes. You add these yourself |
| Your device's push notification token | To notify you that someone is at the gate | Yes, turn off notifications |
| SMS alerts for dues and emergencies | Reminders and announcements | Yes. This consent is optional and can be withdrawn at any time. Sign-in codes are sent regardless, because you cannot sign in without them |
| Your name shown against your flat in the resident directory | So neighbours can find you | No, see below |
The four consent purposes above appear in the app exactly as written there. Two are marked required and two are not, and the app records each decision with a timestamp and a version.
If you are a visitor
You will not have signed up for anything, and you are still a Data Principal with rights.
When you arrive at a gate that uses Perimeter, the guard may record your name, your phone number, the flat you are visiting, your vehicle's number plate, and a photograph of you. That photograph is shown to the resident you have come to see, so they can decide whether to admit you.
Your society is required to display a notice at the gate saying this happens. If no such notice is displayed, tell the society's Grievance Officer.
Your photograph is deleted automatically after 30 days. The record that you visited is kept for 365 days, because it is a building's security log.
If you are a domestic worker or vendor
Your name, phone number and the flats you work for are recorded, so guards can admit you without a resident approving each entry. Your attendance may be recorded. The same rights below apply to you.
3. How long we keep things
These are the defaults. Your society can shorten them; the app enforces whatever it sets.
| Data | Kept for |
|---|---|
| Visitor photographs | 30 days |
| Gate entries and exits | 365 days |
| Vehicle movement records | 180 days |
| Emergency (SOS) alerts | 365 days |
| Notifications sent to you | 90 days |
| Tenancy agreements | 365 days after the tenancy ends |
| Payment proof you upload | 365 days |
| Invoices, receipts and accounting entries | Retained as long as the law requires, see below |
4. Your rights, and how to use them
See what we hold. Ask your society’s Grievance Officer, named at the foot of the privacy notice in the app. We produce a machine-readable file containing your profile, your household, your bills and payments, your complaints and your gate history, and your society passes it to you.
Correct what is wrong. Edit your own profile in the app, under Settings. For anything your society entered (your flat number, your name on a bill) ask your committee or the Grievance Officer, and they correct it.
Delete your account. In the app, under Settings. It is a request your committee reviews first: when they action it you are anonymised, your name and phone number are removed, your login stops working and your photographs are deleted. They must answer within the period the DPDP Act allows.
Your financial records are not deleted, and cannot be. Invoices, receipts and ledger entries stay, in a form that no longer names you. This is not us keeping your data for our benefit: a co-operative housing society is legally required to keep its books, and those books have to balance. A deleted invoice would leave the society's accounts wrong for every other member.
Withdraw a consent. In the app, under Settings. SMS alerts are optional and can be turned off at any time; turning them off does not affect anything else. Consent history is append-only, so there is always a record of what you agreed to and when, including decisions about things we no longer ask.
5. Who else sees your data
We use a small number of services to make the app work. Each receives only what it needs.
| Service | What it receives | Why |
|---|---|---|
| Your society's payment gateway (Razorpay, Cashfree, PayU or Paytm) | Your name, phone and the amount, when you pay a bill | To take the payment |
| SMS provider (currently BlackSMS; MSG91 for templated messages) | Your phone number and the message | Sign-in codes, dues reminders |
| Expo push notifications | Your device's push token and the notification | To alert you about a visitor |
| Sentry | Crash diagnostics | To fix crashes. Configured to strip personal data: no names, numbers or flats |
| Hosting provider | Everything, at rest | The servers the app runs on |
We never hold your money. Payments settle directly into your society's own bank account through the society's own gateway account. We do not take a cut of your maintenance, we do not hold funds in transit, and we could not release your payment to your society even if we wanted to. It was never ours.
We do not sell your data. We do not share it for advertising. There is no advertising in the app.
6. Things that are more private than you might assume
Your messages are end-to-end encrypted. Group and direct messages are encrypted on your device with keys we do not hold. We cannot read them. Neither can your committee, and neither can anybody with access to the database.
A tenant's household is separate from the landlord's. If you rent, your landlord does not see your visitors, your gate history, or the people in your home, even though they own the flat and receive its bills. When a flat changes hands, the previous household's records stop being visible to the new one, and vice versa.
Your neighbours see your name and your flat, and nothing else. That pairing is already on your society's noticeboard and in its share register: it is the one fact about you your neighbours are entitled to, and a directory that hides it is a directory nobody can use.
Your phone number is not directory data, and never has been. No resident can read another resident's number: the database restricts each member to their own record, and the directory carries no phone column at all. Your committee can see numbers, because it cannot run a society or answer a gate without them.
Guards see what the gate requires and no more. A guard can see who lives in a flat well enough to announce a visitor. A guard cannot see your bills, your dues, or your complaints.
7. Security
Access is enforced by the database itself rather than by the app, so a fault in one screen cannot expose another society's data. Every society's data is isolated at the row level. Personal data is encrypted in transit; payment gateway credentials are encrypted at rest with keys held separately from the data.
We test these boundaries automatically on every change, including that one society cannot read another's records, that a guard cannot read financial data, and that a landlord cannot read a tenant's household.
No system is perfectly secure. If we discover a breach affecting your data we will notify your society and the Data Protection Board as the DPDP Act requires.
8. Children
Perimeter is not intended for anyone under 18. A resident may record household members who are children (names and ages) as part of their own household record. That information is visible only to the household and to the committee, and is deleted with the household record.
9. Changes
If this policy changes materially you will be asked to read and accept the new version when you next open the app. Previous versions and your acceptance of each are kept.
10. Contact
Your society's Grievance Officer, in the app under Settings, is the first point of contact.
For platform-level matters: support@perimeter.co.in, Mumbai, Maharashtra, India.
You may complain to the Data Protection Board of India at any time.
Deleting your account has its own page: how to delete your account. The terms of service cover who is responsible for what.