Privacy Policy

This Privacy Policy explains how Marzi (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use our mobile applications Resident App - Marzi and Staff App - Marzi (together, the “Apps”). The Apps help residential communities manage visitors, deliveries, complaints, staff tasks, safety alerts, and resident services. We operate from Bengaluru, Karnataka, India. For any privacy question, email support@marzi.in.

1. Information we collect

We collect only the data needed to operate the Apps:

• Account & identity — your mobile phone number (used to sign in via one-time password), name, and optionally email address.
• Identity verification documents (Resident App) — KYC documents you choose to upload for your society office, such as Aadhaar, PAN, an ID proof, and an address proof.
• Photos and media — images you choose to capture or upload, such as visitor photos, complaint photos, profile photos, and (Staff App) task and gate-entry photos.
• Location (Staff App) — precise GPS location captured only at the moment a staff member takes a task verification photo or raises an emergency SOS alert. This is used in the foreground only; we do not track location in the background. In the Resident App, location is used only if you raise a Medical SOS alert.
• Community content — posts and comments you choose to share with other residents of your society.
• Device & technical data — a device notification token (to deliver push notifications), the app version, and crash-diagnostic data (Staff App, via Sentry) which includes a non-identifying user reference.

We do not collect any advertising identifier (IDFA / Advertising ID), and the Apps contain no third-party advertising or cross-app tracking.

2. How we use your data

• Authenticate you securely using a one-time password (OTP).
• Provide the core features: visitor and delivery management, complaints, staff tasks, the resident directory, community posts, and notices.
• Send you push notifications about visitors, deliveries, tasks, and emergencies.
• Keep the community safe, including processing SOS / emergency alerts and sharing your location with security or operations during an alert.
• Verify resident identity for your society office using the KYC documents you provide.
• Diagnose crashes and improve reliability.
• Meet legal, audit, and security obligations.

3. Legal basis

We process your personal data under the Digital Personal Data Protection Act, 2023 (India) on the basis of your consent and for the legitimate purpose of operating your residential community. You may withdraw consent at any time by deleting your account (see Section 7).

4. How we share your data

We do not sell your personal data. We share it only as needed to run the Apps:

• Your society — the management committee, administrators, and security staff of your community, for the functions above.
• Service providers — cloud hosting and storage (Amazon Web Services, India region), our authentication / OTP provider (Marzi), and crash diagnostics (Sentry). These providers process data only on our instructions.
• Legal — where required by law, regulation, or valid legal process.

5. Data security

All data is encrypted in transit using HTTPS. We apply role-based access controls, store data in secured systems, and maintain an audit trail of administrative actions. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

6. Data retention

We keep your personal data while your account is active. When you delete your account, we erase or anonymise your personal data (see Section 7). We retain a minimal, de-identified record where required for audit, security, fraud-prevention, or legal and accounting obligations. Accounts that remain inactive for three years are automatically anonymised.

7. Your rights and choices

Under the Digital Personal Data Protection Act, 2023 you may access, correct, or export your data, withdraw consent, and request deletion of your account and associated personal data. You can delete your account directly inside either App (Profile → Delete Account), or follow the steps on our Account Deletion page.

8. Children

The Apps are intended for adult residents and staff of a registered residential community and are not directed to children under 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the Apps.

10. Contact us

For any privacy request or grievance, contact our Grievance Officer at support@marzi.in, Marzi, Bengaluru, Karnataka, India. We will respond within the timelines required by applicable law.