Privacy Notice
Last updated: 22 October 2026
This notice explains what personal data LaFlaunt collects, why, and your rights. It covers the demo request form on our website, free-trial sign-ups, LaFlaunt accounts (signing up and signing in), and the flat and resident records that a building's committee keeps in LaFlaunt. As we add features for managing buildings, we will update this notice before they go live.
1. Who we are
LaFlaunt is a sole proprietorship based at Market Yard, Pune, Maharashtra 411037, India ("LaFlaunt", "we", "us"). We decide why and how your personal data is used. Contact for anything in this notice: privacy@laflaunt.com.
2. What we collect
Demo request form
| Data | Required? |
|---|---|
| Your name | Required |
| Mobile number | Required |
| Email address | Required |
| Your building's name and city | Required |
| Number of flats in the building | Required |
| How the building is managed today (e.g. spreadsheets, WhatsApp) | Required |
| Your biggest challenge in managing the building | Optional |
| Campaign source of your visit (e.g. utm_source=whatsapp), if present in the link you clicked | Automatic |
| Date and time you gave consent | Automatic |
Free trial sign-up
When you start a free trial at laflaunt.com/start, we create your account and, once you confirm your email, your building's workspace with you as its admin.
| Data | Required? |
|---|---|
| Your name, email address and mobile number | Required |
| Your building's name, city and address, number of flats, and the state | Required (address optional) |
| Password — stored only in scrambled (hashed) form by our sign-in provider | Required |
| The version and date of the Terms and Privacy Notice you agreed to, and your IP address at sign-up | Automatic |
| A one-way fingerprint (keyed hash) of your email address and mobile number, so each can start only one free trial. The fingerprint can't be turned back into your email or number | Automatic |
LaFlaunt accounts
| Data | Required? |
|---|---|
| Your name and email address | Required |
| Mobile number | Optional |
| Two-step login: the secret that links your authenticator app — kept by our sign-in provider, never shown again after setup | Required for building admins and treasurers; optional for others |
| Password — stored only in scrambled (hashed) form by our sign-in provider; nobody at LaFlaunt can see it | Required |
| Security records: date and time, IP address and the action (for example signed in, failed sign-in, password changed, details updated) | Automatic |
Flat and resident records
Your building's admin may record the flats in the building and who owns or lives in them, so the building can be run (for example, to know whom to contact and, later, to send maintenance bills). You may be recorded even if you don't have a LaFlaunt account.
| Data | Notes |
|---|---|
| Flat details: block, floor, flat number, area, notes | Entered by the building admin |
| Owners, tenants and family members of each flat: name, mobile number and email | Name required; contacts optional |
| Move-in and move-out (or sale) dates, and past owners and tenants | Kept as history |
| Maintenance bills, payments and receipts for each flat: amounts, dates, how it was paid and its reference number | Entered by the admin or treasurer |
| UPI payments you report from a bill: amount, date and the UPI reference number (seen by you and the building's money committee). LaFlaunt never receives the money | Entered by you |
| The building's expenses, including who was paid and photos or PDFs of their bills (kept private to the committee) | Entered by the admin or treasurer |
| Notices you've opened (which flats have seen a notice is shown to the committee, never when) | Automatic |
| Complaints you raise, replies and photos (seen by you and the committee, or everyone if you mark it a common-area problem) | Entered by you |
| Building documents uploaded by the committee (for example AGM minutes), shared with all residents or the committee only | Entered by the committee |
We do not ask for financial details or government ID numbers. Please don't include anyone else's personal data in free-text fields.
Cookies: when you sign in, we set a small essential cookie that keeps you signed in. We do not use advertising cookies or third-party tracking. We also use your IP address briefly, in memory, to block repeated attempts and abuse.
Our public website counts visits using Web Analytics. It does not use cookies and does not follow individual visitors; it only counts how many people visit each page, and from which country, kind of device and browser. Pages you see after signing in are not measured.
3. Why we use it
Demo request form — only to:
- contact you by phone, WhatsApp or email about the demo you asked for;
- understand the needs of buildings like yours so we can plan onboarding; and
- understand which of our campaigns bring people to LaFlaunt (using campaign source only).
Free trial sign-up — only to:
- create your account and your building's workspace, on the right plan for its size;
- email you about your trial (for example 7, 3 and 1 day before it ends, and before an unpaid trial's records are deleted);
- contact you if you need help choosing a plan; and
- make sure each email address and mobile number gets only one free trial.
LaFlaunt accounts — only to:
- create your account, sign you in and keep your details up to date;
- send emails you need for your account, such as confirming your email or resetting your password;
- keep accounts secure and investigate misuse (security records); and
- meet our obligations under Indian law.
Flat and resident records — only to:
- let your building's admin, treasurer and committee know who owns or lives in each flat and how to reach them;
- if your building turns on automatic dues reminders, email the person a flat's bill goes to when the flat has maintenance due (anyone can switch these emails off on their account page); and
- keep a correct history of past owners and tenants, so older records still make sense.
We will not sell your data, share it with other buildings, or use it for unrelated marketing. We will not add you to a newsletter unless you separately agree.
4. Your consent
We process this data on the basis of your consent: you give it by ticking the consent box on the form, or by creating an account. Giving consent is voluntary; without it we can't respond to your request or provide an account.
You can withdraw consent at any time, as easily as you gave it, by emailing privacy@laflaunt.com with the subject "Withdraw consent" (or "Delete my account"). We will stop contacting you and delete your data as described in section 6. Withdrawal does not affect anything we did before it.
5. Who we share it with
Only with service providers that help us run LaFlaunt, under contract and only for the purposes above:
| Type of provider | What it does | Where data is stored and processed |
|---|---|---|
| Cloud database and sign-in provider | Stores your data and signs you in | India (Mumbai) |
| Website hosting provider | Hosts the website and processes requests | India (Mumbai) |
| Email delivery provider | Sends account emails (confirm your email, reset password), invitations to join a building and dues reminders. Receives your email address and the email content only. | Japan (Tokyo) |
Your data is stored in India. The only data processed outside India is your email address and the content of account emails, which our email provider handles in Japan to deliver them. We may also disclose data where required by Indian law or a lawful order of a court or authority.
6. How long we keep it
- Demo requests: 12 months after our last contact with you, unless you become a customer.
- Account details: while your account is open. You can delete your account yourself on the Account page: your login, name, mobile number and two-step login are removed straight away. If you email us instead, we do it within 30 days. Your building keeps the flat history, bills, receipts and complaints it recorded about your flat (with your name as it was recorded), and security records are kept for the period below.
- Flat and resident records: while your building uses LaFlaunt. When someone moves out or sells, their record is kept as the flat's history rather than deleted. If a building stops using LaFlaunt, we delete its records within 90 days, unless the law requires us to keep them. To correct or remove your details sooner, ask your building's admin or email us.
- Free trials that end without payment: the building is locked when the trial ends, and everything in it — flats, residents, money records, files and the accounts that belong only to that building — is deleted 90 days later. We email the building's admins 30 and 7 days before. We keep only a note that the building existed (its name and country) and the fingerprints of the email address and mobile number used, so the same email or number can't start another free trial. Unfinished sign-ups (email never confirmed) are deleted after 7 days.
- Security records: up to 3 years, so we can investigate misuse and meet legal obligations; then deleted.
If you withdraw consent or ask us to delete your data, we delete it within 30 days, except security records and anything the law requires us to keep.
7. How we protect it
Data is sent over encrypted (HTTPS) connections. Your records can only be read by you, our server and authorised LaFlaunt staff who need them; each person can see only their own account details. In a building, residents' phone numbers and emails are visible only to the building admin, treasurer and committee — never to other residents or other buildings — and only the building admin can change them. A resident who logs in sees only their own flat and their own details. When someone moves out, their login access to that building ends. Every change is recorded in an activity log. Passwords are never stored in readable form. Security records cannot be edited or erased by anyone, including us, before their retention period ends. If a personal data breach occurs, we will notify you and the authorities as required by law.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- access a summary of the personal data we hold about you and how we use it;
- correct, complete or update it (you can edit your account details yourself on the Account page);
- erase it (unless we must keep it by law) — you can delete your account yourself on the Account page;
- withdraw consent (section 4);
- nominate another person to exercise your rights if you die or become unable to; and
- raise a grievance with us (section 9).
To use any of these rights, email privacy@laflaunt.com from the email address you gave us (or tell us the mobile number you used so we can verify it is you). We will respond within 30 days.
9. Grievances
If you have a concern about how we handle your data, contact our Grievance Officer:
Mr. Murtaza, Grievance Officer, LaFlaunt
Email: privacy@laflaunt.com
Address: Market Yard, Pune, Maharashtra 411037, India (full postal address on request by e-mail)
We will acknowledge your complaint within 48 hours and try to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Children
LaFlaunt is meant for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
11. Changes to this notice
If we change this notice, we will update the date at the top. If a change affects how we use data you have already given us, we will ask for your consent again before doing so.