Last updated 2026-10-25
[COMPANY LEGAL NAME] ("FlatWise") runs FlatWise. This policy explains what personal data we handle, why, who can see it, how long we keep it and what you can do about it. We wrote it in plain language.
For the building's own records (residents, bills, staff), the building committee or agency decides what is entered and FlatWise processes it for them. For sign-up, sign-in security, billing and support, FlatWise decides how data is used. Contact: [PRIVACY CONTACT EMAIL], [COMPANY LEGAL NAME], [REGISTERED ADDRESS, CITY, BANGLADESH].
Account: name, email, phone, language, role, a hashed password. Building records: flats, owners and tenants with contact details, bills and payments, expenses, notices and who read them, requests, committee records, visitor logs and photos, vehicle details, hall bookings. Staff: name, phone, pay, and National ID numbers kept encrypted. Tenant onboarding: details and documents the tenant uploads, such as NID and photo. Security: sign-in times, IP address and device name, and an activity log. Messages: the SMS and email we send and whether they were delivered.
To provide the service you asked for, keep it secure and prevent abuse, bill and support you, meet legal duties, and, only where you agreed or where the law allows, send product emails. We do not sell personal data and we do not use it for advertising.
Inside a building, each person sees only what their role needs. Residents see their own flat; committee roles and the admin see the building's records; contact details are shown only to roles that need them. Every building is kept separate from every other building. FlatWise staff can open a building to give support and their access is logged.
We use providers to run FlatWise, and give them only what they need: hosting and database [HOSTING PROVIDER, COUNTRY], SMS delivery [SMS AGGREGATOR], email delivery [EMAIL PROVIDER], and payment gateways you connect [GATEWAY NAMES]. They may only use the data to provide their service to us.
If data is stored or processed outside Bangladesh, we use providers with suitable safeguards. [OWNER TO CONFIRM WHERE DATA IS HOSTED]
FlatWise uses no advertising, analytics or tracking cookies and no third-party trackers. That is why there is no cookie banner. We only use what is strictly necessary for the site to work: your sign-in (a token kept in your browser and a secure sign-in cookie), your language, your day or night choice and the building you last opened. These stay on your device and are removed when you sign out or clear site data.
Financial records of a building (invoices, payments, ledger) are kept for as long as the building uses FlatWise, because they are its books. Other data is kept for set periods, which FlatWise can change and shows in its admin tools. Current defaults: visitor logs, photos and passes 24 months; sent email and SMS logs 12 months; contact details and onboarding documents of people who moved out 36 months. The audit log is not deleted. After a building leaves, we delete or anonymise its data after [RETENTION AFTER LEAVING, for example 90 days] unless the law requires us to keep it.
Passwords are stored as one-way hashes. National ID numbers are encrypted and every time one is revealed it is logged. Documents are stored privately. Buildings are separated. Connections use HTTPS. Important actions are written to an append-only activity log. We back up regularly. No system is perfectly safe; if there is a breach that affects you, we will tell you and the authorities as the law requires.
You can see your details in FlatWise and ask the building admin to correct them. Admins can export the building's data from Data export. You can ask us to erase your personal details from your Profile (Delete my account). We erase your name, contact details, photo and profile and close your sign-in; invoices, payments and the ledger stay without your name, because they are the building's financial records. Marketing emails have an unsubscribe link. For anything else write to [PRIVACY CONTACT EMAIL].
FlatWise is for adults who run or live in a building. We do not knowingly collect data from children, except where an adult adds a family member to a tenant form.
If we change this policy in a way that matters, we will tell property admins in the app or by email. Questions or complaints: [PRIVACY CONTACT EMAIL], [COMPANY LEGAL NAME], [REGISTERED ADDRESS, CITY, BANGLADESH].
Other policies: Terms of Service · Refunds and cancellation
