GateLink - Society Management Software
+91 91218 63117Society Login
Back to Home
DPDP Act 2023 Compliant

Data Processing & Resident Privacy Addendum

Binding data protection terms establishing GateLink Technologies as a Data Processor and Housing Societies (RWAs) as Data Fiduciaries under Indian law.

Last Revised: August 2026 • Statutory Compliance Release
STATUTORY PURPOSE
Because GateLink processes resident profiles, gate visitor logs, vehicular records, and maintenance ledgers, this document establishes strict technical and organizational safeguards required by the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.

1. Data Fiduciary vs. Data Processor Roles

  • Housing Society / RWA (Data Fiduciary): The RWA remains the exclusive owner and Data Fiduciary of all resident records, flat mappings, visitor entry logs, and staff data uploaded to the GateLink platform.
  • GateLink Technologies (Data Processor): GateLink acts solely as an authorized Data Processor executing digital operations on behalf of the RWA. GateLink never claims ownership or third-party rights over society data.

2. Security & Encryption Standards

TLS 1.3 Encryption
All data transferred between mobile apps, web browsers, and backend servers is encrypted using TLS 1.3 protocols.
AES-256 Storage
Firestore databases, user credentials, and media files are encrypted at rest using industry-standard AES-256 bit encryption.
Multi-Tenant Isolation
Firestore security rules enforce complete multi-tenant isolation, guaranteeing Society A cannot read or mutate Society B data.

3. Visitor Log Retention & Data Purging

To prevent indefinite storage of guest entry logs and personal phone numbers:

  • Default Retention Period: Gate visitor logs and entry photos are automatically archived or purged after 180 days, unless an RWA explicitly requests extended retention for security audits.
  • Resident Move-Out Erasure: When a tenant or owner moves out, their personal contact record is unlinked from the flat address and archived or erased upon RWA admin approval.

4. Authorized Cloud Sub-Processors

GateLink utilizes verified enterprise cloud infrastructure providers bound by strict data processing contracts:

  • Google Cloud Platform & Firebase: Cloud database, authentication, and serverless hosting (Asia-South1 / Mumbai Data Region).
  • Cashfree Payments India: Payment gateway processing for maintenance collections (RBI-licensed Payment Aggregator).
  • Twilio / Gupshup: Transactional SMS and WhatsApp visitor OTP delivery.

5. Data Breach Notification Protocol

In the unlikely event of a security incident affecting resident data, GateLink will notify affected RWA administrators and statutory authorities within 72 hours of confirmation, detailing the scope, corrective measures taken, and mitigation steps.

For DPA queries or security compliance requests, contact our Data Protection Officer at support@gatelink.in or admin@gatelink.in.