PG Connect helps paying-guest accommodation owners manage rooms, tenants and rent, lets tenants see their own stay, and helps people looking for a room find a PG. This policy explains what we collect, why, and what you can ask us to do about it.
PG Connect is run by Nexotri (“we”, “us”), a sole proprietorship in Kolhapur, Maharashtra, India, registered as an MSME under Udyam registration number UDYAM-MH-15-0316683. We decide how the app works, and we are responsible for the personal data in it. Our website, enquiries to Nexotri and WhatsApp conversations with us are covered by the Nexotri privacy policy instead.
Contact: info@nexotri.com · +91 84849 64515 · Kolhapur, Maharashtra 416113, India
Who this covers
Six kinds of people appear in PG Connect:
- PG owners, and anyone else with admin access to a property, who helps run it in the app.
- Tenants, who live in one.
- People looking for a PG, who can search the map and send a PG an enquiry without an account.
- Visitors — a guest a tenant registers in advance, or someone the PG records at the gate. A visitor never signs in, but their name and phone number are stored so the gate expects them, along with their relation to the tenant, the purpose of the visit and when they came and went. If you register a guest, you are sharing their details with your PG.
- Staff an owner keeps records for — name, phone number, role, monthly salary, joining date and daily attendance. Staff do not sign in; the owner enters these details.
- Emergency contacts — the person a tenant names in case they need help. If you name one, you are sharing their name, number and relationship to you with your PG.
Visitors, staff and emergency contacts never deal with us directly: someone else entered their details. If that is you, you have the same rights as anyone else here — see Your rights.
What we collect
Only what the app needs to work. Nothing is bought from data brokers, and nothing is collected for advertising.
We use it with your consent — which you give by creating an account, filling in a field or sending an enquiry — or where India's Digital Personal Data Protection Act, 2023 (the DPDP Act) allows it without separate consent, such as keeping financial records the law requires.
From everyone who signs in
| Data | Why |
|---|---|
| Name and mobile number | To identify your account and sign you in. If you sign in with WhatsApp, the number you message us from is how we find your account |
| Email address | To sign in with a password or with Google, and to email you codes, password resets and messages about your account. Optional if you sign up with WhatsApp |
| Password | Stored only as a bcrypt hash. A temporary password your PG sets for you is shown to your PG — see below. An account made with WhatsApp has none |
| One-time code and its expiry | To confirm your email address when you sign up with one. Emailed to you; it expires after 10 minutes and is cleared once used |
| Password reset code and its expiry | Emailed to you if you forget your password. It expires after 60 minutes and is cleared once used |
| Your WhatsApp sign-ins: the number, a scrambled form of the code, and when it was sent and used | To match the message you send us to the sign-in waiting on your phone. Each expires after 10 minutes |
| When your number was last confirmed over WhatsApp | So the account records that the number has been proven |
| Google account identifier | Only if you sign in with Google, to recognise your Google account next time |
| Date of last sign-in | So you and we can spot access you do not recognise |
| Notification token | To send notifications to your device, if you allow them |
| Notifications we have sent you, and your notification switches | So you can read them again in the app. See Notifications |
From tenants
| Data | Why |
|---|---|
| Room and bed, move-in date, rent, deposit | To bill you correctly and show your stay |
| Notice and move-out dates, deposit refund and any deductions | To close your stay correctly |
| Invoices, payments, receipts, payment references you enter | To keep a rent record both sides can see |
| Complaints, the messages on them, and your rating once one is resolved | To get things fixed, and to keep the history |
| Meals skipped, meal ratings | So the kitchen cooks the right amount |
| Guests you register | So the gate expects them |
| Which notices you have opened, and when | So your PG can see who has read an announcement |
| Invitations from other PGs, and your answer | So you can stay in more than one PG, and only if you accept |
| Date of birth, gender, occupation, employer, blood group, permanent address | Optional. Your PG asks; you may leave them blank |
| Emergency contact name, number, relationship | Optional, so your PG can reach someone if you need help |
| Identity document entries — the type (Aadhaar, PAN, police verification, college ID and others), a number or reference, and a note | Optional, so your PG can record which documents it has checked. See Government ID below |
| A request to close your account, and any reason you give | So your PG can settle what is outstanding first. See Deleting your account |
Your PG can also add you to the app itself. It then enters your name, email address, phone number and bed, may fill in some of the optional details above, and sets a temporary password to pass on to you. Change it when you first sign in. The PG your account was first attached to can also reset your password at any time, however you signed up: it is then shown the new temporary password, which, with your email address, opens your account until you change it.
From PG owners
| Data | Why |
|---|---|
| Property name, address, contact details, amenities | To run the property and, if listed, show it to prospective tenants |
| Property coordinates and place name | Only when you press a button to use your current location — when you sign up, or when you pin a property — or type them in yourself, to show the property on a map |
| Tenant, staff and expense records | Your business data; we hold it so the app works |
| Enquiries and visitors you record | The same |
| Your UPI ID and payee name | Shown to your tenants on their invoices, so they can pay you |
| Subscription plan and status | To apply your plan and bill you |
| The Razorpay reference of a plan payment | To match your payment to your plan. See Paying for a plan |
| Which trial and plan emails we have sent you | So we do not send you the same one twice |
From people looking for a PG
| Data | Why |
|---|---|
| Your location, only if you tap “Use my location” on the map | To show PGs near you. It is sent with that search and not saved to any account — but see How long we keep it about our server logs |
| The words and filters you search with | To answer the search. The same applies |
| An enquiry: your name, phone number or email address, the room type you want, your budget, when you want to move in, and a note | Sent to that PG, whose owner and anyone else with admin access to it are notified at once. You do not need an account to send one |
Government ID. The signup form has an optional field labelled “Aadhar number”, and each identity document entry a PG records has a field for its number. Neither limits what is typed: whatever is entered, a complete number included, is stored as entered and shown to the PG. The app never asks for a scan or a photo of a document. Enter only the last four digits of an Aadhaar number — they are enough for a PG's own records, and we do not want a complete one.
On your phone
Signing in stores a session token and a copy of your profile on your phone, so the app opens without asking again. That copy includes the optional details you have filled in — an Aadhaar number, date of birth, blood group, permanent address and emergency contact among them. Your language choice is kept there too. Android's own backup can include this storage in your phone's backup to your Google account. Signing out removes the token and the profile from the phone, but notifications for that account keep arriving on it until another account is signed in there; if you hand the phone on, turn PG Connect's notifications off in the phone's settings.
When the app starts, it registers with Google's Firebase Cloud Messaging, which gives this installation an identifier used to deliver notifications, and it asks Expo, which delivers our app updates, whether a newer version exists — sending a random identifier for this installation. Razorpay's payment software, which is part of the app for everyone who installs it and not only for owners, starts with the app too and can contact Razorpay then — see Paying for a plan.
Signing in
There are three ways to sign in.
With WhatsApp
You type your mobile number and the app opens WhatsApp with a short code, such as PG-7KQ4MD, already written in a message to our business number, +91 84849 64515. When you press send, Meta, which runs WhatsApp, delivers the message to a Nexotri server that passes it on to PG Connect. We read two things from it: the code, and the number it came from — that number is how we know the account is yours. Meta's delivery also carries your WhatsApp profile name; we neither read nor keep it. We do not send you a code, and we never message you first.
If your number is on more than one account, the app lists them — name, role and PG — for you to choose from. If it is on none, you can create an account with just your name, whether you are a tenant or an owner, and your PG: no email address and no password.
The code works once, for ten minutes, and only from the number that asked for it. Both of our servers log the number each text message they receive came from, never its text. The relay passes Meta's whole delivery to PG Connect whenever a message contains something shaped like a code — PG- followed by six letters or digits — so a message that only mentions, say, “PG-Connect” reaches it too; PG Connect finds no sign-in in it and keeps nothing but that log line. If you write anything else to the same number — a question, a photo, words beside the code — the whole message also goes to Nexotri's WhatsApp inbox, where a person reads it, and that conversation is covered by the Nexotri privacy policy, not this one.
With email and password
You give your name, email address, mobile number and a password, and we email you a six-digit code to confirm the address. If you forget the password, we email you a code to reset it.
With Google
If you choose Google, Google tells us your name, your email address and that Google has verified it. We find your account by that address, and keep Google's identifier for your Google account so we recognise it next time. We never see your Google password, and we ask Google for nothing beyond your basic profile. If you have no account yet, your name and email address from Google fill in the signup form, and are kept only if you finish signing up.
Paying for a plan
Owners buy a PG Connect plan inside the app, on Razorpay's own checkout. We pass Razorpay the plan, its price and our reference for your account, and your name, email address and phone number so the form is filled in for you. You enter your card, UPI or bank details on Razorpay's checkout, not on our screens. When our server checks a payment with Razorpay, Razorpay's answer also describes how you paid — such as the UPI ID, bank or wallet — and the email address and phone number used. For each plan payment we keep a record: Razorpay's payment and order references, the plan and period it bought, the amount and currency, whether it succeeded, failed or was refunded (and how much), the kind of method (such as “upi” or “card” — never the UPI ID, card or bank details) and when it happened. It is how we make sure a payment is counted once, and how we answer questions about your bills.
Razorpay's checkout software is part of the app for everyone who installs it, and starts whenever the app does. It is Razorpay's code, and it can send Razorpay technical details about your phone and each payment attempt — device and network identifiers among them, which on older versions of Android can include the phone's advertising identifier — for fraud checks and to run its service, under Razorpay's own privacy policy. It can also see which UPI payment apps are installed on your phone and report that list to Razorpay. During a card payment, if you agree on screen, it reads the one-time-password SMS your bank sends, to fill the code in.
PG Connect never handles rent. Tenants pay their PG directly — the app can open a UPI app with the PG's UPI ID filled in — and then record the payment for the PG to confirm.
Notifications
If you allow notifications, we send them to your phone — rent due, a payment confirmed, a reply on a complaint, a guest approved, an invitation, and for a property's owner and anyone else with admin access to it a joining request or a new enquiry. Each one travels from our server through Expo and then Google's Firebase Cloud Messaging, which is how Android reaches a phone, and its text can include names and amounts: a tenant's name and the rent they still owe, for example, or the name and phone number of someone who sent an enquiry.
The same text is kept in the app's notification list until you delete it. You can turn notifications off at any time in your phone's settings. Under Profile, the Rent reminders switch stops the rent reminders your PG sends; the Meal updates and Notices switches are saved but do not yet change what is sent, so use your phone's settings to stop those. PG Connect sends no SMS and no WhatsApp messages, and it emails only the codes and account messages described in this policy.
What we do not collect
No advertising identifiers, and no analytics or tracking SDKs, of our own — the Razorpay and Google software described above reports to those companies under their own policies. No contacts, photos or files from your device. No background location — location is read only when you tap a button that uses it: “Use my location” on the map, or an owner pinning a property. No SMS — except that Razorpay's checkout, if you agree on screen during a card payment, reads your bank's one-time-password message. None of your WhatsApp chats — only the messages you choose to send to our number.
Where it is stored, and who can see it
In a PostgreSQL database on a server we operate in Oracle Cloud's Mumbai region, in India, reached only over HTTPS. The Nexotri server that relays WhatsApp sign-ins is in the same region.
Access is scoped by property: an owner, and anyone else with admin access to a property, sees only the properties they run and the people in them. Within a property every admin sees the same as its owner — its tenants and their details, dues, documents and requests, visitors, staff, enquiries and joining requests. A tenant sees their own records, and the name, bed and phone number of anyone sharing their room.
Some things are shown more widely:
- If an owner lists a property, anyone can see its name, area, map position, who it is for, amenities, vacant beds and starting rent on the map, and anyone signed in can see its address and its contact phone number and email address.
- The name and city of every active property, and its map position and the place name for it if it has them, are public whether it is listed or not: the signup screen uses them so a tenant can find their PG.
- An enquiry goes to the PG you send it to — its owner and anyone else with admin access to it.
- A PG can invite an existing tenant to stay with it by entering the email address on their account. From that moment, before you answer, it can see the name, email address, phone number and gender on your account, when the account was made, the PG you first joined, the total rent you owe and the due date of the oldest unpaid bill, and any request you have made to close your account, with the reason you gave. You choose whether to accept; if you do, it also sees your stay with it like any other tenant's. The rent total every PG you live in sees is what you owe across all your PGs, not only that one.
- The PG your account was first attached to can also see your stays at any other PG — rent, deposit, refund, deductions and the reasons for them, and notes — and your rent, payment, complaint and document records there.
We do not sell your data or share it for advertising. It reaches third parties only as:
- Oracle Cloud Infrastructure — hosts our servers, in its Mumbai region.
- Meta (WhatsApp Business Platform) — delivers the sign-in message you send to our WhatsApp number, and tells us which number sent it and its WhatsApp profile name. Meta processes it under its own terms.
- Spacemail (Spaceship) — sends verification codes and password resets, and our other emails: account-deletion confirmations, and owners' trial and plan notices.
- Brevo — sends the same emails when Spacemail cannot.
- Google — delivers notifications to Android phones (Firebase Cloud Messaging); confirms your Google account, if you choose Google sign-in; draws the maps in the app (Google Maps), which show where you are when you use “Use my location”; and, on most Android phones, turns a location an owner pins into a place name.
- Expo — relays push notifications to your device, if enabled, and delivers app updates.
- OpenStreetMap (Nominatim) — when an owner captures their location while signing up, the app sends those coordinates to OpenStreetMap's public service to look up a place name.
- Razorpay — processes plan payments made in the app. Card and UPI details are entered on Razorpay's own checkout, and never reach us; we keep a record of each plan payment, as described in Paying for a plan. Its checkout software, part of the app, also sends Razorpay technical details about your phone, as described in Paying for a plan.
- Anyone we are legally required to disclose to, such as a valid police or court request.
Some of these process data outside India as part of their service — Meta, Google, Expo, Brevo and OpenStreetMap among them. The DPDP Act allows this, except to countries the Government of India restricts by notification, and we will follow any such restriction.
How long we keep it
- While your account is active. We do not delete accounts for inactivity.
- When you delete your account, your personal details go at once — see Deleting your account. Rent and payment records stay with the PG, without your name, for as long as the PG uses PG Connect: rent and payment records are financial records both sides may need.
- Complaints you raised stay in the PG's history after you leave, and a message you wrote on one keeps the name you had when you wrote it. Each property's activity log — who changed what, and when — has no end date, and its entries can still name you after you delete your account, including the entry recording that your PG approved the deletion. Ask us if you want either removed.
- When an owner deletes their account, every property, tenant record, invoice, payment, expense, notice, enquiry, visitor and staff record in it is deleted at once. The properties' activity logs are not: their entries, which can name the owner, tenants and staff and give amounts paid and refunded, stay on our server, as does our own record of the owner's plan changes and payments, which can hold the owner's email address and Razorpay's payment reference. Ask us and we will remove them.
- Enquiries and staff records stay until the owner deletes them, or deletes their account. Visitor records linked to a tenant are deleted with that tenant's account. The app has no way to delete a single visitor record, so other visitor records stay until the owner deletes their account; ask us if you want one removed.
- Notifications stay in the app until you delete them, or your account.
- A verification or reset code stops working when it expires, and is cleared from your account once used or replaced.
- WhatsApp sign-in records expire after 10 minutes, and are deleted once they are a day old, the next time anyone starts a WhatsApp sign-in.
- Our servers log each request: when it was made, the internet address it came from, the kind of phone or browser that made it, and the web address it asked for — which includes the words of a search, such as an owner searching their tenants by name or phone number, and the location a map search was made from. The logs also hold some names, email addresses and phone numbers: the number each WhatsApp message to our sign-in number came from, an owner's email address or name when we send a trial or plan notice, the address of an email that could not be delivered or of a Google sign-in we refused, a tenant's name or phone number with the text of a rent reminder their PG sends, and the details of a request that failed, which can include what was typed into it. The logs are used only to run and protect the service, and are deleted as they rotate.
- Routine nightly database backups are pruned daily once they are more than 14 full days old; rotation is not an exact 15-day deadline. Separate restricted deployment-recovery snapshots expire after 30 days and are removed at the next daily cleanup. Account deletion does not immediately remove data from these copies. Contact us about a deletion request affecting backups or recovery snapshots.
Your rights
You can ask us under this policy to find out what we hold about you, have it corrected or erased, withdraw consent, have a grievance answered, and name someone to act for you. The DPDP Act and Rules have a phased commencement; statutory rights and complaint procedures apply as the relevant provisions take effect.
Write to info@nexotri.com and we will, within 30 days:
- Show you the data we hold about you, what we do with it, and who we have shared it with.
- Correct anything wrong — most of it you can edit yourself in the app. Your email address is the exception: ask us to change it.
- Delete your account and personal data, except records we must keep for legal or accounting reasons. A tenant's rent history stays with their PG for those reasons, as it would on paper.
- Export your data in a machine-readable form.
- Withdraw consent for notifications or optional fields at any time.
- Record your nominee — someone who can exercise these rights for you if you die or become unable to.
You can also message us on WhatsApp from the number on your account. We may ask you to confirm who you are before we act, so that we never hand your data to someone else, and it costs nothing. Withdrawing consent does not undo what was done before it, and an account cannot work without the data it needs — a name and a way to sign in, for example.
Deleting your account
You can delete your account yourself, at any time:
- In the app, under Profile → Delete account. It shows what will go and what will stay, then asks for your password and for you to type DELETE.
- Without the app, at nexotri.com/delete-account, by signing in with your email address and password.
- If your account has no password — because you made it with WhatsApp — or you cannot sign in, because your PG has not approved you yet or has blocked you: by messaging us on WhatsApp from the number on the account. You can also email info@nexotri.com from the address on any account. We delete it within 30 days.
Deleting removes your name, email address and phone number, your password and Google link, your date of birth, gender, address, occupation, employer and blood group, your emergency contact, your Aadhaar number and identity document entries, your notifications and notification token, the guests you registered, your meal skips and ratings, the rent reminders sent to you, and the record of which notices you read. Rent and payment records stay with the PG with your name removed, as described in How long we keep it. Two things are not yet cleared: the date your number was last confirmed over WhatsApp and, if your PG had to approve the deletion, when you asked and the reason you gave. Ask us and we will remove them. If you delete it yourself and your account has an email address, we email you to confirm; when your PG approves a request instead, the account is deleted then, and we do not email you.
If you are a tenant who still owes rent or holds a bed, deleting cannot finish on the spot: a rent record with nobody's name on it is a debt your PG can no longer chase. Your request goes to the PG you live in instead, which is told how much is outstanding, and your account is deleted when the PG confirms your stay is settled. A PG you have already left is not told, even if you owe it rent: write to us and we will take it up with it. If your PG puts the request on hold, it tells you why in the app. If your account is still open 30 days after you asked, write to us and we will take it up: the hold exists to settle rent and free a bed, not to keep your account.
If you run a PG, deleting your account deletes the whole business — every property, room, bed, tenant record, invoice, payment, expense and notice, and your subscription. Your tenants keep their own accounts but lose their tenancy. This cannot be undone. The properties' activity logs stay unless you ask us to remove them — see How long we keep it.
Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made under it, and with the DPDP Act, complaints about how we handle personal data in PG Connect may be sent to our Grievance Officer, Pooja Patil, Nexotri, Kolhapur, Maharashtra 416113, India, at info@nexotri.com. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.
If you are not satisfied after using our grievance process, you may use remedies available under applicable law, including the Data Protection Board of India when the relevant provisions and complaint procedure are in force.
Security
Passwords are stored hashed with bcrypt. All traffic uses HTTPS. Sign-in and code-sending are rate limited. The server is reachable only by SSH key, and the database is not exposed to the internet. Backups are taken nightly.
A WhatsApp sign-in code is stored only as a keyed hash, and we accept a relayed WhatsApp message only if it carries Meta's signature. A plan payment counts only with Razorpay's signature, and its amount always comes from our own price list.
No system is perfectly secure. If we discover a breach affecting your data we will tell you and the Data Protection Board, as India's DPDP Act requires.
Children
PG Connect is for adults renting or running accommodation. We do not knowingly collect data from anyone under 18. If you believe a child's data is here, write to us and we will remove it.
Changes
We will update this page and change the date above. If a change materially affects your rights, we will tell you in the app.