Privacy Policy – GrihaSetu
Effective Date: 19 August 2026
Last Updated: 19 August 2026
GrihaSetu (“GrihaSetu”, “App”, “we”, “us” or “our”) is operated by Vectora Ventures (OPC) Private Limited (“Vectora Ventures”).
We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you use the GrihaSetu mobile application, associated web applications, websites and services.
This Privacy Policy is intended to comply with applicable Indian privacy laws, including the Digital Personal Data Protection Act, 2023 (“DPDPA”) and applicable rules made under it, as well as applicable requirements of the Google Play Store and Apple App Store.
By using GrihaSetu, you acknowledge the practices described in this Privacy Policy.
1. Who operates GrihaSetu
GrihaSetu is operated by:
Vectora Ventures (OPC) Private Limited
Email: [email protected]
Registered Office: 21,7th cross road,Bharat Nagar 2nd phase,Bengaluru-560091
Privacy / Grievance Contact: Gururaj Desai(Director)
For questions regarding this Privacy Policy or the processing of your personal data, you may contact us at the email address above.
For platform-level processing including user accounts, security, support, advertising and operation of GrihaSetu, Vectora Ventures determines how and why personal data is processed.
For apartment-specific information created or managed by an Apartment Administrator on behalf of their apartment community, the relevant apartment community or administrator may also determine the purposes for which such information is maintained. Vectora Ventures processes such information to provide the GrihaSetu service.
2. Who can use GrihaSetu
GrihaSetu is designed primarily for adult:
- apartment owners;
- tenants/residents; and
- apartment administrators.
The service is intended for persons aged 18 years or above.
We do not knowingly create accounts for children or knowingly collect personal data from persons below 18 years of age without legally required authorisation or verifiable parental consent.
We do not intentionally conduct behavioural tracking of children or display personalised or targeted advertising to children.
3. Personal data we may collect
The personal data collected depends on the features you use.
3.1 Account and profile information
When your account is created or you join an apartment, we may collect information such as:
Name;
mobile number;
email address;
apartment or community name;
building, block or unit/flat number;
ownership or tenancy status;
role within the application, such as Owner, Tenant or Apartment Administrator; and
account authentication and verification information.
4. Apartment management information
When you use apartment-management functionality, we may process information including:
maintenance dues;
payment status;
apartment expenses;
announcements;
due reminders;
issues or complaints raised by residents;
comments or responses related to issues;
meeting or community information;
documents, photographs or attachments voluntarily uploaded by users; and
administrative actions performed by Apartment Administrators.
Visibility of this information is controlled according to the user’s role and the functionality of the App.
For example, Apartment Administrators may require access to resident, due, payment and issue information for managing the apartment.
5. Maintenance payments and UPI
GrihaSetu may facilitate payment of apartment maintenance or other apartment dues using UPI.
Where direct UPI payment functionality is used, payment is completed using an external UPI application or payment service selected by you.
Vectora Ventures does not act as the recipient or settlement intermediary for apartment maintenance funds unless expressly disclosed otherwise.
We do not request or store your:
UPI PIN;
bank account password;
internet-banking password;
debit-card PIN;
credit-card PIN; or
other authentication credentials used by your bank or UPI application.
For reconciliation and confirmation of apartment payments, we may store limited payment-related information such as:
amount payable;
amount reported as paid;
payment date;
payment status;
UPI transaction reference or UTR number;
payment reference number; and
a payment confirmation screenshot or other payment evidence that you choose to submit.
Payment screenshots may contain personal information provided by your bank or UPI application. You should avoid submitting information that is not required to verify the transaction.
6. Information collected automatically
When you use GrihaSetu, certain technical information may be collected automatically, including:
device and operating-system information;
application version;
IP address;
session and security logs;
application interaction information;
crash and diagnostic information;
push-notification token;
device or application identifiers; and
information required to prevent abuse, diagnose technical problems and secure the service.
We use this information primarily to operate, secure, troubleshoot and improve GrihaSetu.
7. Advertising and Google AdMob
GrihaSetu may display advertisements using Google AdMob / Google Mobile Ads SDK.
AdMob and its advertising partners may process certain device and usage information in order to provide, limit, measure and protect advertisements.
Depending on device settings, jurisdiction, consent choices and our AdMob configuration, this information may include:
IP address;
general or approximate location inferred from IP address;
advertising identifiers;
application or device identifiers;
information about advertisements displayed;
interactions with advertisements;
application launches, taps or other application interactions;
diagnostic information;
performance information; and
fraud-prevention information.
We do not provide AdMob with your apartment-maintenance records for advertising purposes.
In particular, we do not intentionally send your:
name;
phone number;
email address;
flat or apartment number;
maintenance balance;
UPI transaction reference;
payment screenshot;
issue or complaint description;
apartment expense information; or
resident directory information
to AdMob for personalised advertising.
We do not sell apartment resident lists, maintenance records or payment records to advertisers.
8. Personalised and non-personalised advertising
Advertisements may be personalised or non-personalised depending on applicable law, platform requirements, device settings and your privacy choices.
Where consent is legally required before personalised advertising or advertising-related storage or identifiers may be used, we will request that consent before enabling such processing.
Where you decline advertising consent, we may still display non-personalised, contextual or limited advertisements where permitted.
You may also be provided with a Privacy Choices, Ads Privacy, or similar option within the App where required.
Withdrawal of advertising consent does not require you to delete your GrihaSetu account.
9. Advertising on Apple devices
On iPhone and iPad devices, where advertising activities constitute “tracking” under Apple’s requirements, GrihaSetu will request permission using Apple’s App Tracking Transparency (ATT) framework before accessing Apple’s advertising identifier or enabling tracking that requires such permission.
If you decline tracking permission, we will respect your choice.
Declining tracking permission will not prevent you from using the core apartment-management functionality of GrihaSetu.
10. Precise location
GrihaSetu does not request precise device location solely for advertising purposes.
AdMob may infer approximate or general location from information such as an IP address.
If GrihaSetu introduces a feature that genuinely requires precise location in the future, we will request the relevant device permission and explain the purpose before collecting such information.
11. Why we process your personal data
We process personal data only for lawful purposes connected with operating GrihaSetu, including to:
create and maintain your account;
identify your apartment and flat/unit;
provide role-based access;
enable Apartment Administrators to manage the community;
maintain apartment dues and payment records;
help reconcile maintenance payments;
enable residents to raise and track issues;
deliver announcements and reminders;
send relevant application and push notifications;
provide customer support;
maintain application security;
detect abuse, fraud or unauthorised access;
maintain system logs and backups;
diagnose crashes and technical problems;
comply with applicable laws;
resolve complaints and disputes;
improve reliability and user experience;
display advertisements; and
measure and prevent fraudulent advertising activity.
Where applicable law requires your consent for a particular processing activity, we will seek that consent.
Where processing is permitted under another lawful basis provided under applicable law, we may rely on that basis where appropriate.
12. Consent and withdrawal of consent
Where we process personal data based on your consent, consent will be requested for specified purposes.
You may withdraw your consent for processing that depends on consent.
Where technically applicable, consent may be withdrawn from the relevant privacy or account settings within GrihaSetu.
You may also contact us at:
Withdrawal of consent will not affect processing that was lawfully undertaken before the withdrawal.
Certain information may still need to be retained where required by law, necessary for security or fraud prevention, or necessary to establish, exercise or defend legal claims.
13. How we share information
We do not publicly disclose personal data except as described in this Privacy Policy.
Personal data may be shared with the following categories of recipients where necessary.
Apartment Administrators
Information concerning your apartment, flat, dues, payment status, issues and participation in the apartment may be accessible to authorised Apartment Administrators.
Other apartment users
Certain community information, such as announcements or information intentionally posted to common areas of the App, may be visible to other authorised residents.
Technology service providers
We may use cloud hosting, database, notification, security, monitoring, email or other infrastructure providers to operate GrihaSetu.
Such providers may process data on our behalf only to the extent required to provide their services.
Where a service provider acts on our behalf, we require appropriate contractual, organisational and security protections consistent with applicable law.
Google AdMob and advertising providers
Advertising-related device and usage information may be processed by Google and, where applicable, advertising partners participating in the advertising ecosystem.
Such processing is subject to applicable consent choices, platform rules and Google’s privacy requirements.
Government and legal authorities
We may disclose information when reasonably necessary to comply with applicable law, legal process, court orders, regulatory requirements or lawful government requests.
Corporate transactions
If Vectora Ventures undergoes a merger, acquisition, restructuring or transfer of the GrihaSetu business, relevant information may be transferred as part of that transaction, subject to applicable law and appropriate privacy protections.
14. We do not sell apartment data
Vectora Ventures does not sell resident personal data, apartment payment data or apartment-management records to data brokers or advertisers.
Revenue generated from advertising does not give advertisers access to your apartment’s resident directory, maintenance records, complaints, payment screenshots or UPI transaction information.
15. Data storage and retention
We retain personal data only for as long as reasonably required to provide the service, satisfy the purpose for which it was collected, maintain security, resolve disputes and comply with applicable law.
Account and profile data is generally retained while your GrihaSetu account remains active.
Apartment operational information may be retained while the apartment continues to use the service and while the information remains relevant to apartment administration.
When information is deleted from active systems, residual copies may remain temporarily in encrypted backups until those backups are rotated or deleted.
We aim to remove deleted personal data from normal backup cycles within 90 days, unless longer retention is required for security, dispute resolution or applicable law.
Security, audit, transaction and processing logs may be retained for periods necessary to detect unauthorised access, investigate incidents, maintain system integrity or meet applicable legal retention requirements.
Payment-related information may be retained where reasonably necessary to resolve apartment-payment disputes or demonstrate historical payment status.
When personal data is no longer required for a lawful purpose, it will be deleted or anonymised, subject to applicable legal retention obligations.
16. Account deletion
You may request permanent deletion of your GrihaSetu account.
An account deletion option should be available by reaching out to :
Deleting an account is different from logging out or temporarily deactivating an account.
When an account deletion request is completed, personal information associated with your account will be deleted or anonymised unless retention is reasonably necessary to:
comply with law;
maintain required security or audit records;
prevent fraud;
resolve an ongoing payment or apartment dispute; or
establish, exercise or defend legal claims.
Where information must be retained after account deletion, access will be restricted and the information will not be used for unrelated purposes.
17. Your rights
Subject to applicable law, you may have the right to:
obtain information about the personal data being processed about you;
request correction of inaccurate or incomplete information;
request updating of your personal data;
request erasure of personal data that is no longer required;
withdraw consent where processing relies upon consent;
request deletion of your account;
raise a grievance concerning our processing of your information; and
exercise other rights provided by applicable data-protection law, including nomination rights where applicable.
To exercise these rights, contact:
We may need to verify your identity before fulfilling certain requests to protect users from unauthorised account or data requests.
Requests will be handled within the period required under applicable law.
18. Grievance redressal
If you have a concern regarding how GrihaSetu processes your personal data, you may first contact our Privacy / Grievance Contact at:
Vectora Ventures (OPC) Private Limited
Email: [email protected]
Privacy / Grievance Contact: Gururaj Desai
Registered Office: 21,7th cross road,bharat nagar phase 2,bengaluru-560091
We will review and respond to privacy grievances within applicable statutory timelines.
Where provided by applicable law, you may subsequently exercise your right to approach the competent data-protection authority or Data Protection Board.
19. Data security
We use reasonable administrative, organisational and technical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, misuse, loss or destruction.
Depending on the system and type of information, safeguards may include:
encryption of information in transit;
encryption or equivalent safeguards for stored sensitive data;
role-based access controls;
authentication and authorisation controls;
restricted administrative access;
application and security logging;
monitoring for unauthorised activity;
backups;
software security updates; and
incident-response procedures.
No internet-connected service can guarantee absolute security. Users should also protect their devices, passwords and authentication credentials.
20. Personal data breaches
If we become aware of a personal-data breach, we will investigate the incident and take appropriate measures to contain and remediate it.
Where required under applicable law, we will notify affected users and/or the appropriate governmental or data-protection authority.
Such notification may include information regarding the nature of the incident, potential consequences, measures we have taken and steps users may take to protect themselves.
21. International processing
Some technology or advertising service providers may process information using infrastructure located outside India.
Where personal data is transferred or made available outside India, we will comply with applicable restrictions and requirements under Indian data-protection law.
We will also take reasonable steps to ensure service providers processing personal data on our behalf maintain appropriate security and privacy protections.
22. Push notifications
GrihaSetu may send push notifications relating to matters such as:
maintenance dues;
payment reminders;
announcements;
issue updates;
apartment notices; and
application or security information.
You may control push notifications through GrihaSetu settings where available or through your device’s notification settings.
Certain essential security or account-related messages may also be sent by email, SMS or another registered communication channel where necessary.
23. Links and external applications
GrihaSetu may open third-party applications or services, including UPI applications.
When you leave GrihaSetu and interact with a third-party service, that third party’s privacy practices apply to information collected directly by that service.
We encourage you to review the privacy information provided by any external service you choose to use.
24. Changes to this Privacy Policy
We may update this Privacy Policy to reflect:
new application functionality;
changes in advertising services;
changes in technology;
changes in our data-processing practices; or
changes in applicable law or platform requirements.
When material changes are made, we will update the “Last Updated” date and may provide an in-app notice or request fresh consent where legally required.
Your continued use of the App after an update does not substitute for consent where applicable law requires specific consent.
25. Contact us
For privacy questions, complaints, data-access requests, corrections or deletion requests, contact:
Vectora Ventures (OPC) Private Limited
GrihaSetu – Privacy Team
Email: [email protected]
Registered Office: 21,7th cross road,Bharat Nagar 2nd phase,Bengaluru-560091
Privacy / Grievance Contact: Gururaj Desai(Director)
© 2026 Vectora Ventures (OPC) Private Limited. All rights reserved.