Plain-language summary
BookPGnow Owner is a business operations app. We use account, property, resident, staff, finance, KYC, communication, and access-management data only to provide, secure, support, and improve the services selected by an owner. We do not sell personal data.
01 · Coverage
Who and what this policy covers
This Privacy Policy applies to the BookPGnow Owner Android application (package in.bookpgnow.owner), its owner web portal, and the related owner-facing services operated by CanWe Technologies LLP (“BookPGnow”, “we”, “us”, or “our”).
The app is intended for PG owners and people they authorise, such as managers, wardens, cleaning staff, and mess staff. An owner is responsible for having an appropriate basis to enter and manage resident, staff, visitor, and property information. Consumer marketplace activity is covered separately by the BookPGnow marketplace privacy notice.
The service is not designed for children. Owners should not knowingly create an app account for a child.
02 · Transparency
Data the service may handle
The exact data depends on the modules an owner enables and the information they choose to enter.
| Category | Examples |
|---|---|
| Account and device | Owner or authorised staff name, mobile number, email where supplied, OTP verification status, account role, device identifier, platform, app version, language/locale, and security session records. |
| Business and property | Business name, property name, address, locality, optional precise coordinates, property photos, rooms, beds, pricing, amenities, rules, occupancy, and operational configuration. |
| Residents and staff | Names, contact details, assigned room or bed, staff role and permissions, emergency or visitor information, and records entered by an owner or authorised manager. |
| KYC and compliance | Document type, masked or last-four identifier, verification status, consent record, review notes, and documents uploaded for permitted verification workflows. DigiLocker data is processed only when that option is chosen. |
| Operations and access | Bookings, day stays, leads, visits, complaints and replies, maintenance, cleaning checklists and proof, mess subscriptions and attendance, parking vehicles, private QR passes, and entry or exit logs. |
| Finance and communications | Invoices, receipts, rent, deposits, amenity charges, expenses, payment method and status, reminder history, support messages, notification preferences, and WhatsApp consent. |
We also receive information you provide to support, including the content of your request and diagnostic details needed to investigate it. We do not ask you to send full payment-card details, passwords, OTPs, or complete government-identification numbers through support.
03 · Your device
Permissions are used at the moment you choose
Camera and selected photos
Scan private BookPGnow parking or gate QR passes; capture cleaning proof; or select property and room photos. Camera video and microphone audio are not recorded.
Foreground location
Optionally position a property during onboarding or attach location to cleaning proof. The app does not request background location.
Phone-state, call-log, phone-call, microphone, and background-location permissions are blocked in the Android configuration. You can deny or later revoke optional permissions in Android Settings, although the related feature may then be unavailable.
04 · Purpose
How we use the data
- Authenticate owners and authorised staff, maintain secure sessions, and enforce role-based access.
- Create and operate properties, rooms, beds, day stays, premium beds, services, parking, mess, cleaning, maintenance, and other selected modules.
- Manage residents, KYC reviews, bookings, visits, complaints, communication, QR access, and entry or exit records.
- Create invoices and receipts, record online or offline payments, track expenses, and send permitted rent or service reminders.
- Prevent abuse, investigate security incidents, maintain audit records, troubleshoot failures, and provide customer support.
- Meet contractual, accounting, tax, fraud-prevention, legal, and regulatory obligations and improve service reliability.
Transactional WhatsApp messages are sent only where the relevant person has opted in or another lawful basis applies. A recipient may opt out through the available account setting or by contacting us.
05 · Disclosure
When data may be shared
We share the minimum information reasonably needed for the following purposes:
- With the property owner and staff they authorise, according to assigned roles and operational responsibilities.
- With residents or visitors when needed to deliver invoices, receipts, booking, support, mess, maintenance, or private access-pass services.
- With service providers supporting hosting, storage, communications such as OTP, email or WhatsApp, payment processing, document verification such as DigiLocker when selected, security, and technical support.
- With professional advisers, regulators, courts, law enforcement, or other authorities when required by law or necessary to protect rights, safety, and service integrity.
- As part of a merger, financing, restructuring, or transfer of the relevant business, subject to appropriate confidentiality and legal safeguards.
We do not sell personal data and do not use owner operational data for personalised advertising. Providers process information under their own terms where they act independently, such as a payment or government-verification provider.
06 · Protection
Security, storage, and retention
We use reasonable administrative, technical, and organisational controls appropriate to the service, including authenticated sessions, access controls, hashed or masked values for selected identifiers and access tokens, secure transport, logging, and restricted staff access. No internet or storage system can be guaranteed completely secure.
Information is retained while an owner account or property service is active and afterwards only as reasonably needed for the purposes described above. Session and temporary security records are kept for shorter operational periods. Financial, invoice, tax, payment, KYC-review, access, fraud-prevention, dispute, and audit records may be retained for longer where required by law or legitimate compliance needs.
When retention is no longer required, information is deleted, de-identified, or securely disposed of. Backups may retain a protected copy for a limited recovery cycle before scheduled expiry.
07 · Control
Your choices and account deletion
Subject to applicable law and verification, you may request access, correction, or deletion of your owner account data, withdraw optional communication consent, or raise a concern about processing.
Deleting an account removes or de-identifies associated data that we are not required to keep. It is not the same as temporarily disabling access. Records retained for legal, regulatory, security, fraud-prevention, or dispute purposes are isolated from ordinary operational use and deleted when their retention requirement ends.
08 · Contact
Questions, grievances, and updates
CanWe Technologies LLP is the operator responsible for this policy. For privacy questions, rights requests, or grievances, email [email protected]. For general product support, email [email protected].
We may update this policy when the app, law, or our data practices change. Material changes will be communicated through the app, portal, email, or another appropriate notice. The “Last updated” date above identifies the current version.