Privacy & Data Protection Policy
Pingoo / QRVoice is committed to upholding your privacy rights in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India.
Last updated: October 12, 2026 • Policy Version: 3.0 (DPDP Aligned)
180-Day Auto Retention Prune
Call logs, snapshots, gate visitor entries, and audio notes are automatically purged every 180 days.
Encrypted Personal Data
Resident names, emails, and Government IDs are stored using hybrid cryptographic field encryption.
1-Click Right to Erasure
Under DPDP Section 12, users can permanently wipe their account, properties, and data at any time.
1. Introduction & Legal Role
Welcome to Pingoo (QRVoice). We provide smart QR-code doorbell calling, intercom, and community gate security management. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) of India:
- Data Fiduciary: When you register an owner account or use the service directly, Pingoo acts as the Data Fiduciary determining the purpose and means of processing.
- Data Processor: For gated communities and societies, Pingoo processes visitor gate logs on behalf of the registered Residents Welfare Association (RWA) / Society Management.
- Data Principal: You, whether a property owner, resident, security guard, or visitor, are the Data Principal whose personal data is protected under law.
2. Personal Data We Collect & Why
In accordance with the DPDP principle of Data Minimization, we collect only the personal data strictly required to deliver smart intercom and doorbell services:
| Category | Data Elements | Purpose of Processing |
|---|---|---|
| Property Owners & Residents | Name, Mobile Number, Email, Property/Flat Number, Device Push Tokens | Account setup, authentication, call alerts, and parcel pickup OTP notifications. |
| External Doorbell Visitors | Name, Mobile Number, Visit Purpose, IP Address, Verification Snapshot | Ringing the resident, video doorbell preview, anti-spam rate limiting, and gate entry authorization. |
| Security Guards & Staff | Guard Name, Mobile, Society ID, Gate Name, Hashed Gate PIN | Gate booth authentication and entry log auditing. PINs are securely hashed. |
| Live Video & Audio Media | Real-time WebRTC audio/video streams | Encrypted end-to-end between visitor and resident. We NEVER record or store active call audio/video. |
3. Lawful Basis & Notice (DPDP §5 & §6)
Under DPDP Sections 5 & 6, personal data is processed solely with your prior, explicit consent or for legitimate purposes explicitly recognized under the Act:
- Notice Accompanying Consent: Before placing a call or registering an account, users are shown an itemized privacy notice stating the data items collected and retention timeframe.
- Right to Withdraw Consent: You have the right to withdraw consent at any time as easily as it was given, by visiting your profile settings or submitting an erasure request.
- No Secondary Monetization: We do not sell, rent, or trade your personal data with third-party advertisers or data brokers.
4. Retention & Automated Pruning (DPDP §8(7))
Section 8(7) of the DPDP Act mandates that personal data must be erased as soon as the purpose of processing is fulfilled. Pingoo operates an automated daily cron daemon that enforces strict retention limits:
• Call Requests & Messages: Permanently erased after 180 days.
• Visitor Snapshots: S3 cloud image files are permanently wiped when call records reach 180 days.
• Gate Visitor Entries & Parcels: Entry logs and collected parcel records are pruned after 180 days.
• Child Gate Exits: In conformity with minor protection and parental verification, movement records are retained for a maximum of 180 days.
5. Technical & Organizational Safeguards (DPDP §8(5))
To protect personal data against unauthorized access, leakage, or breach, we maintain robust reasonable security safeguards:
- Field-Level Encryption: Sensitive resident details and Government IDs are stored using AES-256 / Hybrid encryption in the database.
- Media Stream Encryption: All live calls use DTLS-SRTP end-to-end encryption. No unencrypted audio or video passes through servers.
- Multi-Tenant Society Isolation: Gate terminals and guards are strictly locked to their assigned society ID via dedicated middleware, preventing cross-society directory leakage.
- Token & PIN Security: Passwords and Guard PINs are stored as one-way cryptographic hashes (Bcrypt, minimum 12 rounds). Session tokens are automatically capped to 2 active devices per account.
6. Special Protection for Children (DPDP §9)
Section 9 of the DPDP Act provides heightened protections for minors (individuals under 18 years of age):
- Parental Approval Required: Child gate exits can only be approved by the authenticated parent or lawful guardian residing in that flat.
- No Behavioral Profiling: We strictly refrain from tracking, behavioral monitoring, or profiling of children.
- Strict Retention: Gate permission logs for minors are auto-pruned within 30 days.
7. Your Rights as a Data Principal
Under Chapter III of the DPDP Act, you have enforceable rights regarding your personal data:
Right to Access (§11)
You may request a summary of personal data processed by Pingoo and the identities of any Data Processors.
Right to Correction & Erasure (§12)
You can update inaccurate data or request complete erasure of your account and files via our Account Deletion Page.
Right of Grievance Redressal (§13)
You have the right to readily available grievance redressal mechanisms from Pingoo before approaching the Data Protection Board.
Right to Nominate (§14)
You may designate an individual who shall exercise your rights in the event of death or incapacity.
8. Grievance Redressal & Contact Officer
In compliance with Section 8(10) of the DPDP Act and the Information Technology (Intermediary Guidelines) Rules, Pingoo has designated a Grievance Redressal Officer:
Designation: Data Protection & Grievance Redressal Officer
Organization: Pingoo / QRVoice Solutions India
Email: privacy@pingoo.in / grievance@pingoo.in
Support Helpline: +91 (080) 4123-PING
Response Timeline: All privacy grievances and erasure requests are acknowledged within 48 hours and resolved within 30 days as prescribed by law.