Your ownership document never stays with us.
We read two fields off your receipt, your name and your flat number, and then the file is destroyed. Sixty seconds, enforced by the system, not by a policy page.
Watch it happen on the right before you upload anything.
Five steps, then nothing is left
Every step below is something the backend does automatically. No step involves a person opening your document.
You upload
Allotment letter or payment receipt, sent over an encrypted connection.
Two fields are read, by AI
Sent to OpenAI's API to extract your name and flat number, nothing else. They don't use API data to train their models, and the file is gone from our side within 60 seconds regardless.
Cross-checked, not just claimed
Your flat is checked against every other verified claim on that unit, not against a neighbour's word.
Status recorded
We keep first name, tower, unit and a verified flag. That is the entire record.
File destroyed
Deleted within 60 seconds of the check finishing. The deletion itself is logged.
If your flat number is already claimed, the request is not auto-approved. We ask you first: keep the receipt for 72 hours so a human Steward can review it, or decline. In that case, the file is deleted immediately and only the attempt is recorded.
“Who in my building can see my number?”
Your Steward is a neighbour, not a company. So contact details are hidden from them by default, and every single reveal is written to an audit trail with their name on it.
Misuse is not a matter of trust. It is a matter of record.
Even we cannot edit the log
The audit collection is create-only at the database permission level. Not “we promise not to delete it.” The delete permission does not exist for our own service account.
Sample of the events recorded against a single request.
What owners ask us before they upload
Then you stay unverified. There is no other route. No Steward can wave you through, because approval requires a system-side check against the unit's other claims. That restriction protects you as much as it inconveniences you.
They see a directory of first names, towers and units. Mobile and email are masked until they click to reveal one member at a time, and each reveal is logged with their identity. Repeated reveals are visible to the platform operator and are grounds for removing their Steward role.
A second claim on a verified unit is never auto-approved. It is flagged and routed to a human Steward, and the claimant must consent to their receipt being held for up to 72 hours for that review. If they decline, the file is deleted at once and the attempt is recorded.
No. There is no public directory. The public search page shows a community, its locality and a count of verified members, never a name, a flat number or a contact detail.
A failed deletion raises an alert rather than passing silently, and storage-level lifecycle rules delete anything left behind as a backstop. Two independent mechanisms have to fail before a file outlives its window.
Yes, plainly: your file is sent over an encrypted connection to OpenAI's API to extract two fields, your name and flat number. Nothing else is asked for and nothing else is returned. OpenAI's API terms mean this data isn't used to train their models, unlike the consumer ChatGPT product. Regardless of what any AI service's own policy says, the file itself is deleted from our storage within 60 seconds, so there's nothing left on our side to worry about either way.
No. We have no advertising business and don't sell contact details to anyone, today or planned. If we ever introduce paid local-services listings, a vendor would only ever receive your contact if you take a specific, explicit action to share it (nothing happens by default), and that action is logged the same way a Steward's contact reveal is. Selling data outright is not part of how this platform makes money.
We're built to collect as little as possible in the first place: mobile-number OTP for identity, no Aadhaar or PAN, and a permanent-deletion promise on the one sensitive document you ever give us. That's a design choice, not a legal certification, and we're not going to overclaim one we haven't gone through a formal audit for. As we grow past pilot scale, a full compliance review under India's DPDP Act is on our list before we would ever expand what we collect.