Privacy Policy

1. Overview & Data Roles

HostixOS Enterprise (“HostixOS”, “we”, “our”, or “us”) is an enterprise-grade cloud accommodation operating system and mobile application suite provided by Nexora Technologies, headquartered in Bengaluru, Karnataka, India.

This Privacy Policy sets forth how personal data is collected, stored, processed, and safeguarded when property operators, university administrators, wardens, students, tenants, and visitors access our website (https://www.hostixos.com), mobile applications, and cloud software.

2. Information We Collect

We collect and process the following categories of information strictly to provide our operational software services:

3. How We Use Information

We process collected data solely for legitimate operational and contract fulfillment purposes, including:

• Generating automated room, bed, and property inventory allocation maps.
• Reconciling monthly rents, utility sub-meter debits, and institutional semester fees.
• Triggering real-time automated WhatsApp and SMS curfew alerts to guardians upon resident gate transit.
• Forecasting cafeteria and mess meal counts to eliminate cafeteria food wastage.
• Preventing fraudulent access through multi-tenant isolation and role-based privilege checks.
• Providing 24/7 technical customer support and operational emergency assistance.

4. Financial & UPI Payment Security

HostixOS facilitates automated digital collections via integrated Tier-1 payment aggregators (including Razorpay, Cashfree, and UPI Autopay):

• Zero Card/PIN Storage: HostixOS never stores, logs, or views customer credit card numbers, debit card CVVs, or bank net-banking passwords.
• Direct Operator Settlement: All resident rent payments are routed directly from resident bank accounts into the property operator’s verified merchant bank account.
• PCI-DSS Compliance: All payment transactions are executed through PCI-DSS Level 1 certified gateways using 256-bit TLS encrypted tokens.

5. Biometrics & Curfew Gate Data

Where hostel operators utilize biometric turnstiles, FaceID hardware, or fingerprint gates integrated with HostixOS:

• Raw biometric imagery is never converted or stored in clear text on HostixOS cloud servers. Hardware devices utilize one-way mathematical hash vectors.
• Turnstile timestamps are used exclusively for campus attendance, student safety verification, and automated parental curfew alerts.
• Operators are required under contract to obtain resident and guardian consent prior to enrolling biometric credentials.

6. Data Sharing & Sub-Processors

HostixOS never sells, rents, or monetizes resident or operator data. Data is shared exclusively with vetted enterprise sub-processors required to provide platform functionality:

7. Storage, Retention & Destruction

All customer data is housed in ISO 27001-certified Indian data center regions. We retain resident records for the active duration of the property operator’s subscription agreement. Upon operator contract termination:

• The operator is granted a 30-day grace period to export all tenant, ledger, and transaction histories in standard CSV/JSON format.
• Following the 30-day grace window, tenant databases and uploaded media files are permanently scrubbed from production storage in accordance with DoD 5220.22-M sanitization standards.

8. User Rights & DPDP Act 2023 Compliance

Under the Indian Digital Personal Data Protection Act, 2023 (DPDP Act) and international privacy frameworks, data principals maintain the right to:

• Access & Review: Request a summary of personal information processed by HostixOS.
• Correction & Erasure: Request the correction of inaccurate personal records or the deletion of obsolete resident files.
• Grievance Redressal: Submit inquiries directly to our designated Data Protection Officer.