Draft for review. This policy will be finalised with legal review before launch.
This policy explains how Round Bit Technologies Pvt. Ltd. ("Boundary", "we", "us") handles personal data when you use the Boundary apps for residents, committee members and gate staff, and this website. It is written for the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and other laws of India.
1. Who is responsible
Boundary is used by housing societies, apartment associations and RWAs (each a "Society"). The Society decides who is added to Boundary and why, so for the data of its residents, tenants, family members, committee and staff the Society is the Data Fiduciary, and Boundary processes that data on its behalf to provide the service. For your account itself (your mobile number and sign-in) and for this website, Boundary is responsible.
If you have a question about why your Society added you or what it records, you can ask your Society's committee or contact us.
2. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Mobile number and one-time codes | You, when you sign in | To sign you in without a password and identify your account |
| Name, email address, and profile photo if you add one | You, or the person who added you | So people in your Society can recognise and contact you |
| Your unit, and whether you are its owner, a tenant or a family member | The Society's secretary or admin (owners), or the unit's owner (tenants and family) | To show who lives where and what each person can do in the app |
| Tenancy dates, and relationships within a household | The unit's owner | To keep the Society's records of who lives in each unit |
| Committee roles such as President, Secretary or Treasurer | The Society's secretary or admin | To show residents who runs the Society and give the right people the right tools |
| Society details: name, registration, address, location, layout, unit areas, photos and logo | Boundary staff and the Society's admin | To set up and run the Society on Boundary |
| Maintenance settings and the Society's expenses, with bills, receipts and other attachments | The Society's treasurer and president | To keep the Society's accounts and approvals |
| Technical data: IP address, device and app version, and logs of requests and errors | Your device, automatically | To keep the service secure, prevent misuse and fix problems |
We do not ask for your Aadhaar, PAN, bank or card details. Features marked "coming soon" in the app, such as visitor entry, may collect more data when they launch; we will update this policy before they do.
3. Device permissions
- Camera: only when you choose to take a profile photo, a photo of a bill, or a Society photo.
- Photos and files: only the image or document you pick, to upload it.
- Location: used only by Boundary staff while registering a Society, to record where it is. Residents' locations are not collected.
- Phone and WhatsApp: tapping call or WhatsApp next to a committee member opens your own phone or WhatsApp app. Boundary does not see those calls or messages.
You can refuse or withdraw any permission in your device settings; only the feature that needs it stops working.
4. How we use it
We use personal data only to provide Boundary to your Society and to you: signing you in, showing the right screens for your role, keeping the Society's records, sending one-time codes and service messages, securing the service, providing support, and improving the apps. We do not sell personal data, show ads, or use residents' data for third-party advertising.
5. Who can see what
- The Society's secretary and admin can see and manage units, owners and committee roles. The treasurer can see residents in read-only form.
- Owners can see and manage the tenants and family of their own unit.
- Residents can see the Society's working committee, with names, roles, phone numbers and photos.
- Expenses and their attachments are visible to the treasurer and president.
- Your details in one Society are never shown in another Society, even if you use the same mobile number in both.
- Boundary staff can access data only when needed to set up a Society, provide support, or keep the service secure.
6. Who we share it with
We use these service providers to run Boundary. They process data only on our instructions:
| Provider | What for |
|---|---|
| Microsoft Azure | Hosting the apps' servers and database |
| Cloudflare (R2 storage) | Storing photos and attachments privately |
| Fast2SMS | Sending one-time sign-in codes by SMS |
| Elastic Email | Sending service emails, where used |
We may also disclose data when the law requires it, for example to comply with a lawful order of a court or government authority, or to protect the safety of people or the service. If Boundary is merged or acquired, data would move to the new owner under this policy.
7. How long we keep it
We keep data while your Society uses Boundary and you are part of it. When an owner, tenant or family member is removed, their record in that Society is marked inactive rather than deleted, so the Society keeps an accurate history (for example, who lived in a unit and when). Expense records are kept as part of the Society's accounts. When a Society stops using Boundary it can ask for an export of its data for 30 days, after which we delete it, except where the law requires us to keep it.
You can ask us to delete your account; see how to delete your account.
8. Security
Data is encrypted in transit. Sign-in uses one-time codes and short-lived tokens. Each Society's data is kept apart and checked on every request. Photos and attachments are stored privately and opened only through the app or short-lived links, and secrets such as storage keys are kept in a secure key vault. No system is perfectly secure; if a personal data breach affects you, we and your Society will inform you and the Data Protection Board of India as the law requires.
9. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data held about you and how it is processed;
- ask for it to be corrected, completed or updated: you can change your own name, email and photo in the app;
- ask for it to be erased, unless it must be kept for a legal purpose;
- withdraw consent where processing is based on consent;
- nominate another person to exercise these rights if you die or become unable to;
- have your complaint addressed by our Grievance Officer, and then by the Data Protection Board of India.
Write to care@boundary.site from, or mentioning, your registered mobile number. Requests about a Society's records may be passed to that Society, as it decides what it records.
10. Children
Boundary accounts are for adults. A child may be listed as a family member of a unit only by the unit's owner, who is responsible for doing so as the child's parent or guardian. We do not track children's behaviour or use their data for advertising.
11. This website
This website does not use cookies for tracking or advertising, and loads no third-party scripts or fonts. Our servers keep standard logs (such as IP address and pages requested) for security.
12. Changes
We may update this policy. We will change the date at the top, and for significant changes we will tell you in the app.
13. Contact and grievances
Grievance Officer, Grievance Officer
Round Bit Technologies Pvt. Ltd., Jaipur, Rajasthan, India
Email: care@boundary.site
We acknowledge complaints within 24 hours and aim to resolve them within 15 days. For anything else, write to care@boundary.site.