Data Processing Summary
This summary outlines the data processing relationship between eMitra Technologies (acting as Data Processor) and Property Owners using FlatMitra (acting as Data Fiduciaries / Controllers), in accordance with India's Digital Personal Data Protection Act, 2023.
A full Data Processing Agreement can be provided on request for enterprise customers or property management companies requiring formal contractual documentation.
Roles
- •Data Fiduciary (Controller): The Property Owner / Customer who collects and determines the purpose of processing tenant personal data.
- •Data Processor: eMitra Technologies, which processes personal data on behalf of the property owner via the FlatMitra platform.
What Data is Processed
We process only the data that the property owner enters into FlatMitra, which may include tenant names, phone numbers, tenancy details, payment status, and maintenance records. We do not process this data for any purpose other than providing the FlatMitra service.
Sub-processors
We use the following sub-processors to deliver our service:
- •Supabase Inc. — database, auth, and storage
- •Vercel Inc. — application hosting
- •PhonePe Business — payment settlement infrastructure
All sub-processors are contractually bound to appropriate data protection standards.
Security Measures
- •Encrypted data transmission (HTTPS/TLS)
- •Row-Level Security to isolate each property owner's data from others
- •Access restricted to authorised personnel only
- •Regular security reviews as the platform scales
Data Subject Rights
When a tenant submits a data request (access, correction, deletion) to their landlord, the property owner can fulfil these requests directly within FlatMitra. For requests that require platform-level action, we will cooperate within 30 days.
Breach Notification
In the event of a personal data breach, we will notify affected property owners within 72 hours. Property owners are responsible for notifying their affected tenants as required by applicable law.
Termination of Processing
Upon account termination, all personal data entered by the property owner will be deleted from active storage within 30 days and from backups within 90 days.
Request Full DPA
Property management companies or enterprise clients requiring a formal DPA document for compliance purposes can request one at support@emitra.dev.
FlatMitra by eMitra Technologies | support@emitra.dev | flat.emitra.dev