The short version
Plain words, not a substitute for the full text below — where they differ, the full text applies.
- We collect what we need to inspect your property and send you the proof — your contact details, your property's address and access notes, and the photos and video from each visit.
- Your property media is seen only by you, the inspector who took it, and anyone you choose to share a report with. We never sell it and never use it for advertising.
- Visit recordings are deleted after 90 days unless you ask us to keep them.
- No advertising trackers or analytics — just the cookies you need to stay signed in.
- You can see, correct and delete your data, and close your account from the app at any time.
1.Who we are
StillYours is run by Naitik Agrawal, HSR Layout, Bengaluru 560102 ("StillYours", "we"). We run stillyours.in and the StillYours owner and inspector apps. For personal data you give us, we are the data fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy applies alongside our Terms of Service.
2.What we collect
| Whose, and what | Details |
|---|---|
| Owners — your account | From Google sign-in: your name, email address and Google account ID — never your Google password. If you sign up with email instead: your email address and a password, which we keep only as a one-way salted hash — nobody, including us, can read it back. From you: your mobile number, the city or country you live in, your time zone, and your notification preferences. |
| Owners — your properties | Addresses, map pins, size and rooms, access notes, who holds the keys, and each visit's entry code. |
| Visits and reports | Photographs and video of the property, the time and — where the phone can tell — the location they were taken at, the checklist, the inspector's notes, and the inspector's location when checking in at the door. |
| Decisions and payments | Bookings, approvals and declines with your reasons, ratings, support messages, bills, and payment references from Razorpay. We never receive your card number, UPI PIN or bank login. |
| Inspectors | Name, mobile number, UPI ID for payouts, identity and address documents and police verification (checked in person), location during check-in, work records and ratings. |
| Early-access and job applications | What you enter on our forms — name, contact details, property or background details. |
| Technical | The sign-in cookies described in section 10, and your IP address, held briefly to limit how many sign-in codes can be requested. |
3.Why we use it
- To carry out visits: assigning an inspector, letting them in with your entry code, walking the checklist and delivering your report.
- To arrange and supervise repairs and cleaning you approve.
- To take payments, raise bills and send refunds, and to pay inspectors.
- To sign you in securely, and to prevent fraud and abuse — such as limiting sign-in codes.
- To tell you what is happening: bookings, arrivals, reports, repairs and bills.
- To answer your questions and complaints.
- To improve the service and train inspectors — using only what you have agreed to, and with anything personal removed.
- To meet our legal obligations, including tax and accounting records.
We do not sell personal data, and we do not use it for advertising or share it with advertisers.
4.Consent and legal basis
- 4.1We process your personal data with your consent, which you give when you create an account, book a visit or submit a form, and for the legitimate uses the DPDP Act allows — such as providing a service you have asked for and meeting legal obligations.
- 4.2You can withdraw consent at any time by writing to us or closing your account. Withdrawing does not affect what was done before, and some data must still be kept for legal reasons (section 7). Without the core data we cannot provide visits.
- 4.3Where you give us details of another person — a caretaker, key holder or family member you share a report with — please make sure they are happy for you to do so.
6.Where it is stored
Your data is stored with the providers listed above, some of whose servers are outside India. We transfer data abroad only as the DPDP Act permits, and only to providers bound to protect it. Video is kept in private storage and opened only through short-lived, signed links.
7.How long we keep it
| Data | Kept for |
|---|---|
| Visit recordings (video) | 90 days after the visit, unless you ask us to keep them longer. |
| Reports, photos and decisions | While your account is open — they are your property's record. |
| Bills and payment records | 8 years, as Indian tax law requires. |
| Sign-in codes | 10 minutes. IP addresses are used only to count code requests over 15 minutes, and are never written to our database. |
| After you close your account | Your name, number and email are removed from it straight away, and share links are switched off. What the law requires us to keep (bills) is kept for that period; the rest is deleted or anonymised. |
8.How we protect it
- Everything travels over HTTPS. Sessions are signed so they cannot be forged.
- Video sits in private storage and is opened only through links that expire within minutes, checked against who is asking.
- Each person sees only their own data: an owner their own properties, an inspector only the jobs assigned to them.
- Photographs can only be taken live on the inspector's camera, never uploaded from a gallery.
No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
9.Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you and how it is used;
- have it corrected, completed or updated;
- have it erased, where we no longer need it or you withdraw consent — subject to what the law requires us to keep;
- have a grievance answered; and
- nominate someone to exercise these rights for you in case of death or incapacity.
You can update most details yourself under Account in the app, and close your account there. For anything else, write to our Grievance Officer (section 13). We respond within 30 days.
11.Children
The Service is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
12.Changes to this policy
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
13.Grievance Officer
Naitik Agrawal, Grievance Officer
StillYours
HSR Layout, Bengaluru 560102
stillyours.care@gmail.com
We acknowledge every request within 48 hours and resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
StillYours · run by Naitik Agrawal · HSR Layout, Bengaluru 560102 · stillyours.care@gmail.com