Security
How your records are protected
Agreement Pro holds identity documents and tenancy records, so the boundaries around them are part of the product rather than a setting. This page describes what is actually in place.
One account, one boundary
Everything you create belongs to your manager account. Staff logins you create work inside it. Nothing you store is readable by another manager, with one deliberate exception described below.
Your account is separate from every other account
- Every property, tenant, agreement and document belongs to one manager account.
- Staff logins you create work inside your account and see only your records.
- No other manager can open your properties, agreements or documents.
Documents are private files, not public links
- Uploaded documents are stored privately. Nothing is readable by guessing a web address.
- When you open a document the server first checks the file belongs to your account, then hands your phone a link that stops working after a few minutes.
- Those links are never written into our logs.
Identity numbers are handled narrowly
- Aadhaar and PAN numbers are stored with the tenant record so you can check and correct them.
- They are never written to our logs, and never printed into a generated agreement document.
- You see the full numbers on your own agreement. A manager in another account who finds the same tenant sees only the last four digits of the Aadhaar number.
Sign-in and sessions
- Passwords are stored only as a bcrypt hash. Nobody can read them back.
- A signed-in session uses short-lived tokens that refresh in the background, tied to the device that signed in.
- Biometric unlock is optional. It unlocks the saved session on your own phone, and the key that identifies your device never leaves it.
- Changing or resetting your password signs out every device, including the one you are using.
What we keep, and for how long
- Operational activity records are kept for 30 days and then deleted automatically. Identity numbers, passwords, tokens and file links are stripped before anything is written.
- Business records are kept while the account is active, as described in the privacy notice.
- Deleting your account removes your records and your stored files.
The one place data crosses accounts
- A manager can search for a tenant across Agreement Pro by Aadhaar number, part of a phone number, or part of a name.
- A match shows the tenant name, the last four digits of the Aadhaar number and the tenant photo. Nothing about the tenancy itself is shown.
- If you have recorded a dispute against a tenant and that tenant is later added at another property, you are told the property and its address. This is the point of the feature, and it is described in the privacy notice.
Email we send
Agreement Pro sends operational email only, to the person who holds the account.
What we send
- A welcome message when an account is created, and sign-in details when someone creates an account for you.
- A code when you ask to reset your password.
- A verification code for staff signing in to the administration portal.
- An acknowledgement when you send a support request, with a reference number.
What we do not do
- We send no marketing or promotional email, and no newsletters.
- Mail goes only to the person who holds the account, at the address recorded on it.
- We do not sell, rent or share email addresses.
If you received email from us that you did not expect, write to us and we will look into it and stop it.
Reporting a security problem
If you believe you have found a vulnerability, write to us with enough detail to reproduce it. Please do not test against other people’s accounts or data.
support@agreementpro.in