1. Who we are
Plainroof ("Plainroof", "we", "us") is a housing-society management platform made by Sketchish Designer LLP, a limited liability partnership registered in India (LLPIN AAK-7414), with its registered office at A-1103, Orchid Paradise, South Bopal, Ahmedabad, Gujarat.
This Privacy Policy explains what personal data we collect, why, how long we keep it and the rights you have. It is published under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them.
2. Our role for each kind of data
Under the DPDP Act, the person who decides why and how data is used is the Data Fiduciary; a company that processes data on their behalf is a Data Processor.
| Whose data | Who decides (Data Fiduciary) | Plainroof's role |
|---|---|---|
| Members of a society using Plainroof: owners, tenants, family members, committee members, staff | The housing society | Data Processor: we process it only on the society's instructions and under our agreement with the society |
| People who use this website, ask for early access or a demo, or write to us | Sketchish Designer LLP | Data Fiduciary |
| Society office bearers' account and billing details for the Plainroof subscription | Sketchish Designer LLP | Data Fiduciary |
If you are a member of a society and want to see, correct or erase your data held in Plainroof, please contact your society's committee first. We will help them respond.
3. What we collect
From website visitors
- What you type into the Early access or Book a demo form: name, role, mobile number, email, society name, city, number of flats, preferred date and time, and your message.
- Basic technical data our servers record for security: IP address, browser type and the pages requested. This website uses no advertising or tracking cookies.
Inside Plainroof (on behalf of a society)
- Identity and contact: names, mobile numbers, email addresses, flat numbers, ownership or tenancy status.
- Documents: share certificates, sale deeds, rent agreements, ID proofs and other documents the society or a member uploads.
- Money records: bills, receipts, payment proofs, UTR and cheque numbers, bank statements uploaded by the society, vendor bills and payments.
- Society records: committee roles, bye-laws, meeting minutes, notices, complaints and visitor entries.
- Sign-in data: the mobile number used to sign in, one-time passwords (never stored in readable form) and a record of sign-ins.
We do not collect card numbers, net-banking passwords or UPI PINs.
4. Why we use it
- To provide Plainroof to the society: billing, receipts, accounts, approvals, notices, complaints and reports.
- To answer your Early access or demo request, and to tell you about Plainroof if you asked us to.
- To keep the service secure, prevent misuse and keep audit records of who did what and when.
- To meet legal duties, such as tax, accounting and audit requirements, and lawful requests from authorities.
We use your data only for the purpose it was given for. We do not sell personal data or share it for advertising.
5. Consent and legal grounds
We process website visitors' data with your consent, given when you tick the box on our forms. You may withdraw consent at any time by writing to us; this does not affect what was done before you withdrew it.
Data inside Plainroof is processed on the society's instructions. The society is responsible for having a lawful ground to process its members' data, such as consent or the legitimate uses allowed by Section 7 of the DPDP Act (for example, keeping the records a co-operative society must keep by law).
6. How AI is used
Plainroof uses AI to help with tasks such as reading bye-laws and bills and drafting notices. AI works only with that society's own records. Everything AI prepares is labelled and must be approved by a person before anything is paid, sent or saved.
We have not chosen an AI provider yet. Before any AI feature uses personal data, we will name the provider here, say where it runs, and whether it keeps the data.
7. Who we share it with
We share personal data only as needed to run Plainroof:
- Within the society: members see only what their role allows. For example, an owner sees only their own flat; a chartered accountant appointed by the society gets view-only access to accounts.
- Service providers who work for us under contract, such as SMS, WhatsApp, email and payment providers. We have not chosen these yet; each one will be named here before we start using it.
- Authorities, when Indian law requires it.
Every service provider is bound to use the data only for the work we give them and to keep it secure.
8. Where it is stored
Plainroof's records and documents are stored on Plainroof's own servers in India. We do not move personal data out of India.
If you are outside India
Plainroof is run from India and this policy follows Indian law. If you ask for early access or a demo from another country, your details are stored in India. If the law where you live gives you more rights over your data (for example the GDPR in the European Union or the UK), write to the Grievance officer and we will respond as that law requires.
9. How long we keep it
- Early access and demo requests: up to 2 years after our last contact with you, or until you ask us to erase them.
- Society records: for as long as the society uses Plainroof, and afterwards for the period the society asks for or the law requires (accounting and tax records are usually kept for at least 8 years).
- Security logs: up to 1 year.
Plainroof never deletes a society's records by accident or silently: corrections are made as new entries with a reason, so the history stays complete. When a record has to be erased by law or at the society's request after its retention period, we erase it from our systems and backups.
10. How we protect it
- Data is encrypted while it travels and while it is stored.
- Each society's data is kept apart; one society can never see another's.
- Access is by role, with two-person approval for money and a full audit trail.
- Our staff can access society data only when needed to support that society.
If a personal data breach happens, we will inform the Data Protection Board of India and the affected society and people as the DPDP Act requires.
11. Your rights
Under the DPDP Act you have the right to:
- get a summary of your personal data we hold and how it is used;
- have inaccurate or incomplete data corrected or updated;
- have data erased when it is no longer needed, unless the law requires us to keep it;
- withdraw consent;
- have your grievance answered; and
- nominate another person to exercise these rights if you die or become unable to.
Write to the Grievance officer below. We may ask you to confirm your identity first.
12. Children
Plainroof is meant for adults. Data of a person under 18 (for example, a family member in a flat) is added only by their parent or lawful guardian, who gives consent on their behalf. We do not track children or show them advertising.
13. Grievance officer
For any question or complaint about your personal data or this policy, contact our Grievance officer:
Chirag, Designated Partner and Grievance officer
Sketchish Designer LLP, A-1103, Orchid Paradise, South Bopal, Ahmedabad, Gujarat
Email: chirag@sketchish.com
Working days: Monday to Friday, 10 am to 6 pm IST
We will acknowledge your complaint within 48 hours and resolve it within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
14. Changes to this policy
We may update this policy. When we make an important change, we will show a notice on this website and tell the society admins using Plainroof before it takes effect. The date at the top shows when it last changed.