Privacy Policy

1. Who we are

AnyRent is a cloud-based property-management platform operated by Shravix Solutions Private Limited ("AnyRent", "we", "us"), a company incorporated in India. This policy explains how we handle personal data across our website, web application and mobile applications (together, the "Service").

You can reach us about anything in this policy at support@shravix.in.

2. Our two roles — please read this first

AnyRent handles two different kinds of personal data, and our responsibilities differ for each. This distinction matters for who you should contact about your data.

If you are a tenant and want to see, correct or delete your information, please contact the property owner or manager you rent from — they control that record. If you cannot reach them, write to us and we will help route your request, but we generally cannot change or erase a property's records without that property's instruction.

3. Information we collect

3.1 Account and business information

When a property owner, manager or staff member signs up or is invited to AnyRent, we collect:

• Name, email address and phone number
• Login credentials (passwords are stored only as salted hashes, never in readable form)
• Assigned role and the properties that account is allowed to access
• Business details such as property names, addresses, units, rooms and beds
• Subscription and billing records for the AnyRent plan itself

3.2 Tenant information entered by our customers

Property owners and managers record information about their tenants in AnyRent. Depending on how each property chooses to use the Service, this can include:

• Full name, phone number, alternative phone number, email address and gender
• Profile photograph
• Occupation and employer
• Emergency contact name, phone number and relationship
• Identity and verification details, including Aadhaar number and PAN — see Section 4
• Uploaded documents such as identity proofs and income statements
• Occupancy details — which property, unit and bed, and move-in and move-out dates
• Rent and payment records, maintenance tickets and related correspondence

We do not decide which of these fields a property fills in. Many are optional, and a property may use very few of them.

3.3 Payment records

AnyRent does not process rent payments and never holds tenant money. Rent is paid directly between tenant and property owner — in cash, by UPI, by bank transfer, by card or by cheque. AnyRent only records that a payment happened.

What we store is limited to:

• The amount, date, billing period and payment status
• The payment mode (for example cash, UPI or bank transfer)
• A reference number you choose to enter, such as a UPI or bank transaction reference

We do not collect or store full card numbers, CVVs, bank account credentials, UPI PINs or net-banking passwords. No such field exists in the Service.

3.4 Technical and usage information

• Log data such as IP address, browser or device type, and timestamps of requests
• Authentication session tokens used to keep you signed in
• Records of notifications we sent on a property's behalf, and their delivery status
• Audit information showing which account created or last modified a record

3.5 Mobile application data

• A push notification token, if you allow notifications, so we can deliver alerts to your device
• Files or photographs you choose to upload from your device — accessed only when you select them

The AnyRent mobile apps do not track your location in the background, read your contacts, or scan your photo library.

4. Sensitive personal data (Aadhaar, PAN and documents)

AnyRent provides fields for Aadhaar and PAN numbers and for uploading identity documents, because verifying tenant identity is a routine and often legally expected part of running a hostel, PG or co-living property in India. These are sensitive, and we treat them that way:

• They are visible only to the property's own team, limited further by that team member's role and assigned properties
• Uploaded documents are held in private storage that is not publicly reachable, and are served only through short-lived, access-checked links
• They are never used for advertising, profiling, credit scoring or any purpose beyond the property's own record-keeping
• They are never sold or shared with data brokers

For property owners and managers: collecting Aadhaar, PAN or identity documents from your tenants is your decision and your legal responsibility. You must have a lawful basis and obtain your tenants' consent, collect only what you genuinely need, and comply with all applicable Indian law — including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules governing Aadhaar. AnyRent gives you a secure place to store this information; it does not make you compliant on its own.

5. How we use information

We use personal data only to run and improve the Service, specifically to:

• Create and secure accounts and authenticate sign-ins
• Provide property, tenant, occupancy, rent, expense and maintenance features
• Generate payment receipts and reports
• Send operational messages a property has asked us to send on its behalf (see Section 8)
• Provide customer support and investigate issues you report
• Monitor reliability, prevent abuse and fraud, and keep the Service secure
• Bill our customers for their AnyRent subscription
• Comply with legal obligations and enforce our Terms

We do not sell personal data. We do not share it with advertisers, and we do not use tenant data to train machine-learning models.

6. Who we share information with

We share personal data only with the service providers needed to operate AnyRent, and only to the extent each one needs. They act on our instructions and are bound to protect the data.

We may also disclose information where we are legally required to, specifically:

• To comply with a valid legal obligation, court order or lawful government request
• To establish, exercise or defend a legal claim
• To protect the rights, safety or property of our users, the public or AnyRent
• To a successor entity in a merger, acquisition or restructuring, under equivalent protection

7. Where data is stored

AnyRent's application and database infrastructure and uploaded files are hosted in Amazon Web Services' Asia Pacific (Mumbai) region in India. Some sub-processors listed above may route message or notification traffic through infrastructure outside India in order to deliver it. Where that happens, we rely on the provider's contractual safeguards for that transfer.

8. Messages we send

AnyRent sends two different kinds of messages, and your choices differ for each:

• Operational messages sent for a property. Payment receipts, rent reminders, welcome messages, vacating reminders, ticket updates and similar notices, delivered by WhatsApp, email, SMS or push. These are sent at the instruction of the property you rent from or manage, and are part of the service it provides you. To stop or change these, contact that property — it controls whether and how they are sent.
• Messages from us about your AnyRent account. Service, security and billing notices. These are necessary to provide the Service and cannot be opted out of while your account is active. Any purely promotional email from us will always include an unsubscribe link.

You can turn off mobile push notifications at any time in your device settings, and revoke messaging consent by contacting the property or us as appropriate.

9. How long we keep data

• Tenant and property records are kept for as long as the property's account is active, because payment history, occupancy history and receipts are records the property relies on. A property can delete individual tenant records at any time.
• Account data is kept while the account is active and for a reasonable period afterwards to handle billing, disputes and legal obligations.
• Notification and audit logs are kept for a limited period for troubleshooting, delivery evidence and security investigation.
• Where law requires a longer retention period — for example tax and accounting records — we keep the relevant data for that period.

After deletion, residual copies may persist briefly in encrypted backups before being overwritten in the ordinary backup cycle.

10. Security

Measures we apply include:

• Encryption in transit using HTTPS/TLS across the website, apps and API
• Encryption at rest for the database and stored files
• Passwords stored only as salted hashes, never recoverable in readable form
• Strict separation of data between customers, so one customer's data is not reachable by another
• Role-based access control, with staff access limited to their assigned properties
• Private file storage with no public access, served through short-lived access-checked links
• Audit trails recording which account created or modified each record

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a personal data breach affecting you, we will notify you and the relevant authority as required under applicable law.

11. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed
• Have inaccurate or incomplete data corrected or updated
• Have your personal data erased, where we are not required to retain it
• Withdraw consent you previously gave, without affecting processing already carried out
• Nominate another person to exercise your rights in the event of death or incapacity
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved

To exercise any of these, write to support@shravix.in. We may need to verify your identity first. Tenants: please see Section 2 — your property owner or manager controls your record, and we will direct your request to them.

12. Deleting your account and data

You can request deletion of your AnyRent account and its associated personal data at any time by emailing support@shravix.in from the address registered on the account, with the subject line "Account deletion request".

We will verify the request and action it within 30 days. Deleting a property owner's account removes the account profile, the properties managed under it, and the tenant, payment, ticket and document records held within it, other than data we are legally required to retain — for example invoices and tax records. Deletion is permanent and cannot be undone.

Property managers can also delete individual tenant records directly in the app at any time, without contacting us. If you are a tenant, ask your property manager to do this, since your record belongs to their account.

13. Children

AnyRent is a business tool and is not directed at children. We do not knowingly allow anyone under 18 to create an AnyRent account. A property may record a minor as a tenant where that is lawful and the parent or guardian has consented; the property is responsible for obtaining that consent. If you believe a child's data has been recorded improperly, contact us and we will work with the relevant property to address it.

14. Cookies and tracking

This marketing website does not use advertising cookies, third-party analytics or cross-site tracking. The AnyRent web application uses strictly necessary cookies and browser storage to keep you signed in and maintain your session — it will not work without them. We do not run advertising networks or share data with ad platforms.

15. Changes to this policy

We may update this policy as the Service evolves or the law changes. The "Last updated" date at the top always reflects the current version. If a change materially affects how we handle your personal data, we will give notice through the Service or by email before it takes effect. Continuing to use AnyRent after a change means you accept the updated policy.

16. Grievance officer and contact

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it, you may contact our Grievance Officer with any complaint about how your personal data is handled:

• Grievance Officer, Shravix Solutions Private Limited
• Email: support@shravix.in

We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with the outcome, you may escalate to the Data Protection Board of India.