Security

How your records are protected

Agreement Pro holds identity documents and tenancy records, so the boundaries around them are part of the product rather than a setting. This page describes what is actually in place.

One account, one boundary

Everything you create belongs to your manager account. Staff logins you create work inside it. Nothing you store is readable by another manager, with one deliberate exception described below.

Your account is separate from every other account

Every property, tenant, agreement and document belongs to one manager account.
Staff logins you create work inside your account and see only your records.
No other manager can browse your properties, agreements or documents. The exceptions are listed at the end of this page.

Documents are private files, not public links

Uploaded documents are stored privately. Nothing is readable by guessing a web address.
When you open a document the server first checks the file belongs to your account, then hands your phone a link that stops working after a few minutes.
Those links are never written into our logs.

Identity numbers are handled narrowly

Aadhaar and PAN numbers are stored with the tenant record so you can check and correct them.
They are never written to our logs. The tenant’s numbers are printed on the generated agreement document.
You see the full numbers on your own agreement. A manager in another account who finds the same tenant sees only the last four digits of the Aadhaar number in search, but can download that tenant’s latest agreement document, which shows the full numbers.

Sign-in and sessions

Passwords are stored only as a bcrypt hash. Nobody can read them back.
A signed-in session uses short-lived tokens that refresh in the background, tied to the device that signed in.
Biometric unlock is optional. It unlocks the saved session on your own phone, and the key that identifies your device never leaves it.
Changing your password in the app keeps you signed in on that phone and signs out every other device. A reset by code or by an admin signs out every device.

What we keep, and for how long

Operational activity records are kept for one year and then deleted automatically. Identity numbers, passwords, tokens and file links are stripped before anything is written.
Business records are kept while the account is active, as described in the privacy notice.
Deleting your account removes your records and your stored files.

Where data crosses accounts

A manager can search for a tenant across Agreement Pro by Aadhaar number, part of a phone number, or part of a name.
A match shows the tenant name, the last four digits of the Aadhaar number and the tenant photo.
The searching manager can also download the tenant’s latest agreement document: the full Aadhaar and PAN numbers, the tenancy details, the property address, and the owning manager’s name, phone and business details. Scanned identity cards are not included.
If you have recorded a dispute against a tenant and that tenant is later added at another property, you are told and, while the dispute is still open, can download that new agreement document. This is the point of the feature, and it is described in the privacy notice.

Email we send

Agreement Pro sends operational email only, to the person who holds the account.

What we send

A welcome message when an account is created, and sign-in details when someone creates an account for you.
A code when you ask to reset your password.
A verification code for staff signing in to the administration portal.
An acknowledgement when you send a support request, with a reference number.
A security notice when your password changes, or when deletion of your account is scheduled or cancelled.
A notice to the account owner when a staff login is added or deactivated, or when staff mark an agreement as disputed.
A notice when a tenant you marked as disputed starts an agreement elsewhere, naming only the tenant.
A reminder 30 days before, 7 days before and on the day your agreements end.
A receipt when you buy credits, a notice when a purchase is refunded or when our team adds credits to your account, a notice when someone you referred makes a first purchase and earns you credits (it does not name them), and a warning when your credits are running low.

What we do not do

We send no marketing or promotional email, and no newsletters.
Mail goes only to the person who holds the account, at the address recorded on it.
We do not sell, rent or share email addresses.

If you received email from us that you did not expect, write to us and we will look into it and stop it.

Reporting a security problem

If you believe you have found a vulnerability, write to us with enough detail to reproduce it. Please do not test against other people’s accounts or data.

support@agreementpro.in