CHSLSMART SOCIETY
Notify Me Register Your Society

PRIVACY POLICY — CHSL SMART SOCIETY

By QubikCloud Technology ("we", "us", "Provider") · Effective: 11 October 2026 · Last updated: 11 October 2026
Contacts: contact@chsl.net (general) · info@chsl.net (grievance) · Erasure: erasure@chsl.net (erasure only)
Postal address is configured in the SAAS CHSL ERP (Admin → Settings → Legal/Grievance). · Grievance Officer details are configured in the SAAS CHSL ERP (Admin → Settings → Legal/Grievance) and published from there; this page reflects the current configuration. Grievance Officer, designation, and postal address are maintained in SAAS CHSL ERP (Admin → Settings → Legal/Grievance). If the designation field is not present in ERP, it should be added so values are published dynamically and consistent across all channels.
Domains: chsl.net (public site) · manager.chsl.net (SAAS CHSL ERP)

1. Who we are (data fiduciary)

QubikCloud Technology operates CHSL — chsl.net is the public/marketing site, manager.chsl.net is the SaaS control plane that provisions society workspaces and logins. For website enquiries we act as data fiduciary. For member data inside a society workspace we process it on that society's behalf (society = fiduciary for its records; we = processor), and remain fiduciary for our own operational records.

2. Data we collect

3. Purpose — each item, nothing else

4. Consent

Submitting the enquiry form = consent to be contacted about registration (consent version logged with the record). First member login requires accepting the Member Terms. Every photo upload carries a per-upload consent checkbox ("depicted persons have consented"). Consent may be withdrawn anytime: in-portal settings, or info@chsl.net (general) / erasure@chsl.net (deletion) — withdrawal doesn't affect past lawful processing.

5. Sharing

Never sold. Never shared for marketing. Disclosed only to: (a) your own society's authorised role-holders per role-based access; (b) infrastructure processors (hosting, email delivery) bound by contract to use it only for our service; (c) authorities on lawful order. No cross-society visibility, ever.

6. Retention

Enquiries: till 22 Aug 2027 + 12 months, then deleted. Active workspace: for the subscription duration plus opt-out/shutdown windows (Terms Cl. 20/21). After exit: personal data erased within 30 days (backups roll off 90 days); invoices/payment records 8 years (tax law); contracts/enquiries 3 years (limitation); security logs 90 days anonymised. No retrieval after deletion.

7. Your rights (DPDP Act 2023)

Access your data (via portal or society office). Correct it (portal or office, prospective). Nominate (see Cl. 14). Request erasure: self-serve in portal (Privacy → Request Erasure) or email erasure@chsl.net from your registered contact with society name + flat number — completed within 30 days except records the society must legally retain (billing history, minutes naming you, audit logs), anonymised where possible. Seek grievance redressal (ack within 48 hours).

8. Children

No personal data of children under 18 without verifiable parent/guardian consent — obtaining it is the society's duty and it must inform members. On complaint, order, or knowledge we cease processing and erase, notify the society, with no further liability. Society indemnifies Provider.

9. Security

HTTPS on every page; role-based access (you see only your role's data); audit trail with login ID + timestamp on every write; secrets and stored records never web-accessible; backups maintained by Provider. No system is perfect — report suspected misuse to info@chsl.net immediately.

10. Cookies

chsl.net uses essential cookies only (navigation, dismissal states, form progress). No advertising trackers. If privacy-respecting analytics is added later, it will be disclosed here before activation.

11. Breach notice

If a personal-data breach affects you, we notify your society with the nature, likely impact, and mitigation within prescribed timelines, and cooperate with the society's notifications to members.

12. Grievance

[OFFICER NAME], [designation], [email] — acknowledgement within 48 hours, resolution per DPDP timelines. Escalation: info@chsl.net. This process doesn't limit your right to approach the Data Protection Board (Cl. 19).

13. Changes

Material changes notified 15 days in advance at chsl.net/privacy.php; continued use = acceptance. Previous versions available on request.

14. Nomination

You may nominate another person to exercise your data rights (access, correction, erasure) in case of death or incapacity — via portal or erasure@chsl.net with proof of relationship/authority.

15. Cross-border transfer

Data is stored and processed in India. No transfer outside India except where infrastructure requires it — then only to Government-permitted countries with equivalent protection, disclosed here before it happens.

16. Automated decisions

We make no solely-automated decisions about any member — no profiling, scoring, or auto-suspension. Every access, billing, or messaging action originates from the society or human review.

17. Language & notice

This English policy governs; key consent and erasure notices are also shown in-app in simple language at the point of collection.

18. Third-party links & processors

The site may link to or use third-party services (hosting, email, analytics if enabled). Their failures and policies are theirs, not ours. Current processor list available on request at info@chsl.net.

19. Complaints to the Board

If unsatisfied with our grievance handling, you may approach the Data Protection Board of India under the DPDP Act — nothing here takes away that right.

20. Children — app-level bar

The portal blocks under-18 self-registration; child records must be added by a parent/guardian-linked primary member with the consent checkbox ticked, and are erased on notice per Cl. 8.