Nexotri
Legal
Privacy Policy
PG Connect, operated by Nexotri · Last updated 7 August 2026
PG Connect helps paying-guest accommodation owners manage rooms, tenants and rent, and lets tenants see their own stay. This policy explains what we collect, why, and what you can ask us to do about it.
Contact: info@nexotri.com
Who this covers
Three kinds of people appear in PG Connect:
- PG owners and staff, who run a property.
- Tenants, who live in one.
- Visitors — a guest a tenant registers in advance. A visitor never signs in, but their name and phone number are stored so the gate expects them. If you register a guest, you are sharing their details with your PG.
What we collect
Only what the app needs to work. Nothing is bought from data brokers, and nothing is collected for advertising.
From everyone who signs in
| Data | Why |
|---|---|
| Name, email address, mobile number | To identify your account, sign you in, and send verification codes |
| Password | Stored only as a bcrypt hash — we cannot read it |
| One-time code and its expiry | To verify your number at signup or password reset. Deleted once used or expired |
| Date of last sign-in | So you and we can spot access you do not recognise |
| Notification token | To send notifications to your device, if you allow them |
From tenants
| Data | Why |
|---|---|
| Room and bed, move-in date, rent, deposit | To bill you correctly and show your stay |
| Invoices, payments, receipts, payment references you enter | To keep a rent record both sides can see |
| Complaints and the messages on them | To get things fixed, and to keep the history |
| Meals skipped, meal ratings | So the kitchen cooks the right amount |
| Guests you register | So the gate expects them |
| Date of birth, gender, occupation, employer, blood group, permanent address | Optional. Your PG asks; you may leave them blank |
| Emergency contact name, number, relationship | Optional, so your PG can reach someone if you need help |
From PG owners
| Data | Why |
|---|---|
| Property name, address, contact details, amenities | To run the property and, if listed, show it to prospective tenants |
| Property coordinates and place name | Only when you press “use my current location”, to pin the property on a map |
| Tenant, staff and expense records | Your business data; we hold it so the app works |
| Subscription plan and status | To apply your plan and bill you |
Government ID. The app stores a reference to an identity document — the last four digits only. It never asks for a complete Aadhaar number or a scan, and you should not enter one.
What we do not collect
No advertising identifiers. No contacts, photos or files from your device. No background location — location is read only when an owner explicitly taps the button to pin a property, and never for tenants. No analytics or tracking SDKs.
Where it is stored, and who can see it
In a PostgreSQL database on a server we operate in Mumbai, India, reached only over HTTPS.
Access is scoped by property: an owner sees only their own properties and the tenants in them; a tenant sees only their own records.
We do not sell your data or share it for advertising. It reaches third parties only as:
- Spacemail (Spaceship) — sends verification codes and password resets.
- Expo — relays push notifications to your device, if enabled.
- Razorpay — processes subscription payments made on this website. Card details are entered on Razorpay's own checkout and never reach our servers.
- Anyone we are legally required to disclose to, such as a valid police or court request.
How long we keep it
While your account is active, and for 12 months after it closes — rent and payment records are financial records both sides may need. Verification codes are deleted as soon as they are used or expire.
Your rights
Write to info@nexotri.com and we will, within 30 days:
- Show you the data we hold about you.
- Correct anything wrong — most of it you can edit yourself in the app.
- Delete your account and personal data, except records we must keep for legal or accounting reasons. A tenant's rent history stays with their PG for those reasons, as it would on paper.
- Export your data in a machine-readable form.
- Withdraw consent for notifications or optional fields at any time.
To request deletion without installing the app, email the address above from the address on your account.
Security
Passwords are hashed with bcrypt. All traffic uses HTTPS. Sign-in and code-sending are rate limited. The server is reachable only by SSH key, and the database is not exposed to the internet. Backups are taken nightly.
No system is perfectly secure. If we discover a breach affecting your data we will tell you and the Data Protection Board, as India's DPDP Act requires.
Children
PG Connect is for adults renting or running accommodation. We do not knowingly collect data from anyone under 18. If you believe a child's data is here, write to us and we will remove it.
Changes
We will update this page and change the date above. If a change materially affects your rights, we will tell you in the app.