Privacy policy

1. Who we are and our role

Gateora is operated by Utkal Technologies Pvt. Ltd. (Bhubaneswar, Odisha, India). This policy explains how personal data is handled when you use the Gateora website, management console and mobile app.

For data about residents, visitors, guards and staff of a community, the organisation that subscribes to Gateora (for example an RWA, society or facility manager) is the data fiduciary under the Digital Personal Data Protection Act, 2023. We process that data on its behalf as a data processor. For enquiries made through this website and for our customers' account administrators, we are the data fiduciary.

2. Data we process

• Account data: name, email address, phone number, role and community assignments.
• Visitor data: visitor name, phone number, purpose, destination flat, entry and exit times and, where the community requires it, a photo.
• Operational records: approvals, rejections, emergency overrides, incidents and audit logs.
• Device data: device identifiers and push-notification tokens for signed-in mobile devices.
• Website enquiries: the details you submit on our contact form, a one-way hash of your IP address and your browser user-agent, used to prevent abuse.

3. Why we use it

• To run visitor approval, gate entry and exit, and the related notifications.
• To keep the service secure: authentication, fraud and abuse prevention, and audit trails.
• To bill customers and provide support.
• To respond to demo requests you send us, based on your consent.

We do not sell personal data and we do not use it for advertising.

4. Retention

• Visitor photos are deleted after the community's retention period (30 days by default).
• Visit and audit records are kept for as long as the subscribing organisation's retention settings and legal obligations require.
• Website enquiries are anonymised 24 months after the last update.
• Push-notification tokens are removed when a device signs out or a token expires.

5. Who we share it with

We use service providers to operate Gateora — cloud hosting and database, image storage, email, Google authentication, push notifications, real-time messaging, payments and error monitoring. They process data only on our instructions. We may disclose data where required by law.

6. Security

Data is encrypted in transit, access is authorised on the server for every request, visitor photos are served only through short-lived signed links, and sensitive actions are recorded in audit logs. See Security for details.

7. Your rights

You may request access to, correction of, or erasure of your personal data, withdraw consent, and nominate another person to exercise your rights. If your data is held for a community, please contact that community's management first — we will help them respond. You can also write to our grievance officer.

8. Contact

Questions about this policy: contact@utkaltechnologies.com.