Privacy Policy

Imarat360 (SMC-Private) Limited (“Imarat360”, “we”, “us”) operates the Imarat360 platform — the website at imarat360.com, the admin dashboards, the resident mobile applications and related APIs (collectively, the “Service”). This Privacy Policy explains how we collect, use, share and protect information of users of the Service.

We comply with the Prevention of Electronic Crimes Act 2016 (PECA) and the spirit of internationally recognised privacy frameworks such as GDPR where applicable. By using the Service, you consent to the practices described here.

1. Information we collect

1.1 Information you provide to us

• Identity & contact data: name, CNIC (where required by your building bylaws), phone number, email, photograph.
• Residence data: building, block, flat number, owner/tenant status, move-in date, family members, emergency contacts.
• Vehicle data: make, registration number, parking slot.
• Payment data: when you make payments through third-party gateways, we receive a transaction ID, masked card BIN (first 6 / last 4) and status — we do not store full card numbers, CVV codes or banking credentials.
• User-generated content: complaints, photos, chat messages, notice attachments, uploaded documents (lease, NIC etc.).

1.2 Information we collect automatically

• Device and usage data — IP address, device model, OS version, app version, language preference, crash logs (via Sentry).
• Cookies and similar technologies on the website for session management and analytics.
• Push notification tokens (Firebase) for delivering alerts to your device.

2. How we use your information

• To deliver the Service: generate maintenance bills, post notices, manage complaints, process payments.
• To communicate with you: payment reminders, complaint updates, building notices via push, SMS, WhatsApp and email.
• To provide customer support and troubleshoot technical issues.
• To improve the Service: aggregated, de-identified usage analytics inform product decisions.
• To comply with legal obligations including tax invoicing under FBR rules.

3. Who we share information with

We share information only with the parties below, only to the extent necessary. We never sell your personal data.

• Your building's union admin can see your flat, payment status, complaints and documents you upload — this is the core purpose of the Service.
• Payment gateways (e.g. SafePay, 2Checkout, JazzCash, EasyPaisa) process card and wallet payments. They have their own privacy policies which apply to that processing.
• Infrastructure providers — Amazon Web Services (data storage, S3), Firebase (push), Sentry (error tracking), Meta WhatsApp Cloud API (notifications).
• Law enforcement & government authorities if legally compelled (PECA notices, FIA, court order).

4. Data retention

Account data is retained while your building is an active customer. After cancellation, we retain a copy for 90 days for restoration, then permanently delete personal identifiers, retaining only anonymised financial summaries for tax compliance (minimum 6 years as per FBR).

5. Your rights

• Access — request a copy of your personal data.
• Correction — fix inaccurate data.
• Deletion — request removal of your account (subject to building admin approval, since some data is shared with the building).
• Opt out — disable push notifications, WhatsApp or SMS.

To exercise any of these rights, email abdulahadmagsi1@gmail.com. We respond within 30 days.

6. Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based with strict separation between buildings, JWT authentication with rotating refresh tokens, and full audit trails on administrative actions. Despite our efforts, no system is 100% secure; please notify us immediately at abdulahadmagsi1@gmail.com if you suspect a breach.

7. Children

The Service is not intended for users under 13. We do not knowingly collect data from children.

8. Changes to this policy

We will notify you of material changes by email and in-app banner at least 30 days before they take effect.

9. Contact

Imarat360 (SMC-Private) Limited
Flat C-103 Farhan Dream Land Block 16, Gulstan E Johar, Karachi.
abdulahadmagsi1@gmail.com