We are committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how you can control it. We never sell your personal data to third parties.
1. Who We Are
Nizam ("we", "our", or "us") is a residential complex management platform operated by Nizam. Our platform is accessible via www.nizamco.com and the Nizam mobile application.
For any privacy-related questions, please contact us at [email protected].
2. Data We Collect
2.1 Information You Provide Directly
- Account registration: name, email address, phone number, and password (stored as a salted hash).
- Resident profile: unit number, move-in date, and any additional profile information entered by you or a complex administrator.
- Payment details: bill amounts, payment status, and transaction references. We do not store credit or debit card numbers on our servers.
- Communications: messages you send through the in-app chat or the contact form on our website.
- SOS alerts: emergency alert content and, if location permission is granted, your approximate location at the time of the alert.
2.2 Information Collected Automatically
- Device information: device type, operating system version, and app version.
- Usage data: pages viewed, features used, and actions performed within the application (anonymised where possible).
- Log data: IP address, browser type, referring URL, and timestamps of server requests.
- Push notification tokens: device tokens used solely to deliver in-app notifications and SOS alerts.
2.3 Information From Third Parties
- Firebase (Google): we use Firebase Authentication and Firebase Cloud Messaging to manage sign-in and push notifications. Firebase may collect analytics data per its own privacy policy.
3. How We Use Your Data
We use the data we collect to:
- Provide, maintain, and improve the Nizam platform.
- Authenticate you and keep your account secure.
- Generate and send maintenance bills and payment receipts.
- Deliver push notifications and in-app alerts, including SOS emergency notifications.
- Enable complex administrators to manage residents, units, and committee roles.
- Respond to support requests and enquiries.
- Analyse aggregated usage trends to improve the product (no individual profiling).
- Comply with applicable laws and regulations.
We do not use your data for advertising, selling to third-party marketers, or automated profiling that produces legal or similarly significant effects.
4. Data Sharing
We share personal data only in the following circumstances:
- Within your complex: complex administrators can view resident profiles, unit details, and payment history for units they manage. Residents can only see their own data.
- Service providers: we share data with trusted providers (e.g., cloud hosting, database services, push notification services) who process data on our behalf under strict data-processing agreements.
- Legal requirements: if required by law, court order, or governmental authority, we may disclose data.
- Business transfers: in the event of a merger or acquisition, user data may be transferred — you will be notified in advance.
We never sell your personal data to third parties.
5. Data Storage & Security
Your data is stored on servers hosted in secure data centres. We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit.
- AES-256 encryption for sensitive data at rest.
- Bcrypt password hashing — we never store plaintext passwords.
- Role-based access controls so employees and administrators can only access data they need.
- Regular security audits and vulnerability assessments.
We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, unless we are required to retain it by law.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Correction: request that we correct inaccurate or incomplete data.
- Deletion: request deletion of your personal data ("right to be forgotten").
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to certain processing activities.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Cookies & Tracking
Our marketing website (nizamco.com) uses minimal cookies:
- Strictly necessary cookies: required for the website to function (e.g., session management). No consent required.
- Analytics cookies: we may use anonymous analytics tools to understand how visitors interact with our site. These do not identify individual users.
The Nizam web and mobile application uses local storage and session tokens to keep you logged in. These are not used for advertising.
8. Children's Privacy
Our platform is intended for use by adults (18 years and older) who are residents or administrators of residential complexes. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately at [email protected].
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy. The "Last updated" date at the top of this page will always reflect the most recent version.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: [email protected]
- Website: www.nizamco.com/#contact