Your Privacy Matters to Us

Pindila Solutions Private Limited, a company incorporated under the Companies Act, 2013 ("Company", "we", "us", "our"), owns and operates the brand "PGverse" and the associated website, mobile application, and related digital platforms (collectively, the "Platform"). PGverse enables Property Owners to list Paying Guest ("PG") accommodations and enables Tenants to discover, evaluate, book, and communicate with Property Owners in relation to such accommodations.

This Policy describes how we collect, use, process, store, share, and protect the personal data of Users of the Platform. By accessing, browsing, registering on, or otherwise using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Policy. This Policy applies to all Users located in India; where accessed from outside India, it applies mutatis mutandis to the extent permitted under Applicable Law.

For the purposes of the DPDP Act and other Applicable Law, the Data Fiduciary in respect of all personal data collected, processed, and stored through the Platform is:

PGverse is a brand name owned, operated, and exclusively used by Pindila Solutions Private Limited. No separate legal entity exists under the name "PGverse"; the Company remains solely responsible for the processing of personal data under this Policy.

Information You Provide Directly

When you use PGverse — browsing, requesting a PG visit, listing a property, making a payment, or registering — you may share information with us including:

• Identity information: Full name, contact details, residential address
• Government-issued identity documents: Collected only where legally permissible and necessary, for KYC purposes
• Property and business information: Provided by Property Owners in relation to their listings
• Payment and transaction information: Processed via secure, RBI-licensed payment gateways — we do not store card numbers
• Booking history and preferences: Budget, preferred area, move-in date, room type
• Communications: Messages sent through our contact form, WhatsApp, or support channels
• Photographs and images: Property images and, where applicable, profile photographs

Information Collected Automatically

• Device and log data: IP address, browser type, device model, operating system
• Usage data: Pages viewed, time spent, clicks, search queries on our platform
• Location data: Approximate location derived from IP or, with your permission, GPS location

Information from Third Parties

We may receive data about you from third-party partners such as analytics providers, advertising platforms, verification partners, and payment gateways like Razorpay. This data is used only for the stated purposes described in this Policy.

Where permitted and necessary under Applicable Law, we may collect government-issued identity document information from Tenants and Property Owners for the purpose of KYC verification, including via authorised third-party verification partners (such as DigiLocker-based Aadhaar verification). Such documents are collected strictly on the basis of informed consent and are used solely for identity verification, fraud prevention, and platform safety.

We use your data to make PGverse work for you — and only that. Specifically:

Your data is shared only in these limited, controlled circumstances:

• With PG Owners: When you express interest in a PG, your name and phone number are shared with the listed owner to facilitate contact.
• With Payment Partners: Payment data is processed by Razorpay or similar RBI-licensed gateways. We share only what is required for the transaction.
• With Verification Partners: KYC and identity documents may be shared with authorised verification partners strictly for verification purposes.
• With Analytics Providers: We use analytics tools with data anonymisation enabled wherever possible.
• With Legal Authorities: We may disclose data where required by law, court order, or to protect the safety of our Users or the public.

This Policy does not apply to the independent data practices of Property Owners or other third parties who collect information directly from you outside the Platform. We encourage you to review the privacy practices of any third party you interact with through the Platform.

The Platform uses cookies, web beacons, SDKs, and similar tracking technologies to enhance User experience, remember preferences, authenticate sessions, analyse usage patterns, and deliver relevant content.

You may control or disable cookies through your browser or device settings; disabling certain cookies may affect Platform functionality. Where required under Applicable Law, we present a cookie-consent banner allowing you to manage preferences.

Your data is stored on secure servers, protected using industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encryption for sensitive data at rest
• Role-based access control — only authorised personnel can access your data
• Regular security reviews
• Payment data is never stored on our servers — handled entirely by PCI-DSS compliant gateways

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required under Applicable Law, including for resolving disputes and regulatory obligations. Upon account closure, we cease active use of your data for platform functionality, save for data we are required to retain for legal or dispute-resolution purposes.

Under the DPDP Act and other Applicable Law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Ask us to correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your account and associated data, subject to our retention obligations
• Right to Withdraw Consent: Opt out of marketing communications at any time
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer

With your consent, we may send promotional communications regarding new listings, offers, and features via SMS, email, WhatsApp, push notifications, or other channels. You may opt out at any time using the unsubscribe link, replying "STOP", adjusting notification preferences in the app, or writing to us. Transactional communications necessary for the operation of your account (such as OTPs, booking confirmations, and payment receipts) are not considered marketing communications and cannot be opted out of while you maintain an active account.

We process certain personal data, including device information, IP address, transaction patterns, and identity verification results, to detect and prevent fraud, fake listings, unauthorised bookings, and misuse of the Platform. Where a decision significantly affecting a User (such as account suspension) is made using automated means, the User may seek human review by contacting our Grievance Officer, to the extent required under Applicable Law.

Where a PG property is equipped with CCTV surveillance by the Property Owner, such surveillance is managed solely by the Property Owner, and this Policy does not govern such footage. Where we or our authorised verification partners conduct identity or background verification of Property Owners or Tenants, such verification is conducted strictly on the basis of informed consent and results are shared only on a need-to-know basis.

In the event of a personal data breach, we shall take prompt remedial action to contain and mitigate the breach, and shall notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act and applicable rules.

PGverse is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal data to our Platform, please contact us immediately at support@pgverse.in and we will delete that information promptly.

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated Policy will be posted on the Platform with a revised "Last Updated" date. Where changes are material, we shall provide reasonable notice, which may include in-app notification, email, or SMS, and, where required under Applicable Law, seek fresh consent. Continued use of the Platform following any such update constitutes acceptance of the revised Policy.

In accordance with the IT Act and the DPDP Act, we have appointed a Grievance Officer to address grievances or queries relating to the processing of personal data.

If you are not satisfied with the resolution provided, you may escalate your grievance to the Data Protection Board of India, once constituted and operational, or pursue such other remedies as may be available under Applicable Law.

For any questions, concerns, or requests relating to this Privacy Policy, please reach out to us:

This Policy is governed by the laws of the Republic of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts at Noida (Gautam Buddha Nagar), Uttar Pradesh, India.