Privacy and Policy

Privacy Policy

1. Introduction

Ejyalo Technologies Pvt. Ltd. ("eJyalo", "we", "us", or "our"), a company incorporated under the laws of Nepal with its registered office at Sukedhara, Kathmandu, Bagmati 44600, Nepal, operates the website at ejyalo.com and the eJyalo mobile and web application (collectively, the "Platform").

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to that data. It applies to all users of the Platform — including landlords, property managers, and property owners who use our services, as well as visitors to our marketing website.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

2. Information We Collect

2.1 Information You Provide Directly

  • Account registration: Name, email address, phone number, and password (stored in hashed form).
  • Property data: Building names, addresses, GPS coordinates, property type, floor and unit configuration.
  • Tenant data: Tenant full name, phone number, and email address.
  • Billing and invoicing data: Rent amounts, utility meter readings, billing dates, penalties, discounts, and payment records (amount paid, date, and method — cash, bank transfer, or digital wallet).
  • Financial account details: Bank account numbers and digital wallet identifiers (e.g., eSewa, Khalti) entered by users to facilitate payment record-keeping within the Platform.
  • Subscription information: Chosen plan, billing cycle, and payment status.
  • Inquiry and contact forms (website): Name, email, phone number, purpose, message, and — for service inquiries — number of buildings and units.

2.2 Automatically Collected Information

  • Server and access logs: IP address, browser type, operating system, device information, pages visited, and timestamps, collected automatically when you access the Platform.
  • Location data: GPS coordinates of buildings registered by users in the application.
  • Smart home sensor data: Electricity usage readings, connected light status, and security alert events generated by smart home devices linked to the Platform, stored on our servers.
  • Notification logs: Records of SMS and push notification delivery for billing reminders and alerts.

2.3 Information Collected by Third Parties on Our Behalf

  • Google Tag Manager (GTM): Collects behavioural analytics data, page views, and user interactions on our marketing website to help us understand usage and improve our services.
  • Google reCAPTCHA v3: Collects device and interaction data from forms on our website to distinguish human users from automated bots. This data is processed by Google under their Privacy Policy.

3. How We Use Your Information

  • To create, maintain, and operate your account and provide the services you have requested.
  • To generate rent and utility invoices, track payments, and send billing reminders and notifications (SMS and push).
  • To respond to inquiries, demo requests, and support communications submitted through the website.
  • To analyse usage patterns and improve the functionality, performance, and security of the Platform.
  • To detect, prevent, and address fraudulent, unauthorised, or illegal activity.
  • To comply with applicable laws, regulations, and lawful government requests.

We do not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial purposes.

4. Financial Data — Special Notice

Bank account numbers and digital wallet identifiers entered on the Platform are stored solely to assist you with payment record-keeping. eJyalo is not a payment service provider and does not initiate, process, or execute any financial transactions on your behalf. You are solely responsible for the accuracy of all financial information you enter. We strongly advise that you do not store sensitive credentials beyond what is necessary for your own record-keeping purposes.

5. Third-Party Services

We use the following third-party services that may collect or process data in connection with the Platform:

  • Google Tag Manager / Google Analytics — website usage analytics. Governed by Google's Privacy Policy.
  • Google reCAPTCHA v3 — spam and bot prevention on website forms. Governed by Google's Privacy Policy.
  • SMS notification service — delivery of billing reminders and alerts to registered phone numbers.

eJyalo is not responsible for the data collection or privacy practices of these third-party services. We encourage you to review their respective privacy policies.

5.2 Legal Disclosures

We may disclose your personal data to courts, law enforcement agencies, regulators, or other government bodies where we have a good-faith belief that we are required or permitted to do so by law — including to meet national security or law enforcement requirements, to respond to a court order, subpoena, or search warrant, or to protect the rights, property, or safety of Ejyalo Technologies Pvt. Ltd., our users, or others.

5.3 Business Transfer

If Ejyalo Technologies Pvt. Ltd. is involved in a merger, acquisition, sale of assets, or transfer of business, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership and the choices you may have regarding your personal data before the transfer takes effect.

6. Cookies

The Platform uses the following types of cookies:

  • Session cookies: Temporary cookies that expire when you close your browser, used to maintain your session.
  • reCAPTCHA cookies: Set by Google reCAPTCHA v3 to assess risk and prevent automated abuse on our forms.
  • Analytics cookies: Set by Google Tag Manager to help us understand how visitors interact with our website.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of parts of the Platform.

Do Not Track: Like most online services, the Platform does not currently respond to browser "Do Not Track" signals, as no uniform standard for such signals has been adopted.

7. Data Retention

We retain your personal data for as long as your account remains active or for as long as necessary to provide you with the services. Inquiry and contact form submissions are retained indefinitely.

You may request deletion of your personal data at any time by contacting us at [email protected]. We will process your request within 30 days, subject to any overriding legal obligations to retain the data.

8. Your Rights

Subject to applicable Nepal law, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data, subject to our legal and operational retention requirements.
  • Withdraw consent: Where we rely on your consent to process data, withdraw that consent at any time.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days of receiving your request.

9. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

  • Encrypting sensitive data in transit and at rest;
  • Implementing access controls to limit who can view personal data;
  • Regularly reviewing and updating our security practices in line with accepted industry standards;
  • Training our staff and requiring them to safeguard personal data; and
  • Complying with applicable Nepal data protection laws and security standards.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users in accordance with the requirements of applicable Nepal law.

10. Age Restriction

The Platform is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If we become aware that personal data of a minor has been collected, we will delete it from our systems immediately. If you believe a minor has provided us with personal data, please contact us at [email protected].

11. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of Nepal, including the Individual Privacy Act 2018 (BS 2075) and the Electronic Transactions Act 2006. Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Kathmandu, Nepal.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. Material changes will be indicated by an updated "Last Updated" date at the top of this page. Your continued use of the Platform after such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Ejyalo Technologies Pvt. Ltd.
Sukedhara, Kathmandu, Bagmati 44600, Nepal
Email: [email protected]