Whose data is it, and what happens to it

A society holds names, phone numbers, flat numbers and payment history. Under the DPDP Act, 2023 that carries obligations — and they sit with the society.

This matters more than it sounds. In law the society is the Data Fiduciary for its members’ personal data. Socei is the Data Processor, acting on the society’s instructions.

What that means in practice

The society decides

We process member data to deliver the service, on your documented instructions. We do not use it for anything else.

A written agreement

A Data Processing Agreement is signed at onboarding. It is not optional and it protects both sides.

Consent is recorded

With the policy version, the timestamp and where it was given — so it can be evidenced, not asserted.

Members can withdraw

Per channel. A member can stop WhatsApp without stopping statutory notices by email.

How it is held

Stored in India

Along with daily backups.

Access is limited by role

A guard does not see ledgers. Identifiers are masked in support workflows.

Erasure requests

Actioned within 30 days, except records the society must keep by law.

It stays yours

On exit you get a complete export at no charge, and we delete our copies.

We do not sell member data

Not to advertisers, not to anyone. There is no second business model here.

Next What moving your society actually involves

Want this run for you?

On a managed plan a dedicated accountant does the work and your committee approves it.

Request a proposal