Privacy Policy — Yojaka Vyuha

1. What this notice covers

Yojaka Vyuha is a hostel administration service used by hostel staff to manage resident details, monthly operation charges, invoices and payment status. This notice covers the app, its resident payment pages and the support links shown on the site. Hostel staff enter resident information into the service.

2. Information the app handles

Resident records contain a resident's name, room number, WhatsApp number, active status, operation category and monthly amount. The app creates a unique link token for each resident's payment page. Invoice records contain the invoice month, amount and status; when online payment is enabled, they also contain Razorpay order and payment references and the time a payment was recorded. Reminder counts and the last reminder time are also stored. Administrator sign-in uses a session cookie. The login rate limit uses the request IP address, and persistent Cloudflare Worker invocation logging is enabled in the deployment configuration. The app does not define a fixed log-retention period.

3. How information is used

The app uses resident and invoice information to manage resident accounts, set monthly operation charges, create invoices, display payment history, and reconcile payment results. It also uses administrator session and request information to control access, limit repeated login attempts, and investigate service errors. When messaging is enabled, staff can start a reminder sequence and the scheduled service may send follow-up reminders for eligible unpaid invoices.

4. Payments and payment information

When online payment is configured, Yojaka Vyuha sends Razorpay the invoice amount and currency, an invoice receipt reference, and internal resident/invoice identifiers and invoice month to create an order. The checkout displays the resident's name. Razorpay processes the checkout. Yojaka Vyuha stores the order/payment references, amount, status and recorded payment time; the app does not request or store a UPI PIN, one-time password, banking password or full card number. Razorpay handles checkout data under its own terms and privacy notice.

5. WhatsApp reminders

When reminder messaging is enabled and configured, Yojaka Vyuha sends Dutavo the resident's WhatsApp number, name, invoice month, amount and resident-specific payment link so Dutavo can submit the reminder through WhatsApp. Scheduled follow-ups are only considered for active residents with unpaid invoices after a staff-started reminder and the configured cooldown. Dutavo and WhatsApp process those details under their own terms and privacy notices.

6. Hosting, fonts and other providers

The deployed service uses Cloudflare Workers for hosting and Cloudflare D1 for its application database. Persistent Worker invocation logging is enabled; the exact request or diagnostic fields retained and their retention period depend on Cloudflare's service and account settings. Some Yojaka Vyuha pages load fonts from Google Fonts. When those pages are viewed, the browser requests font stylesheets and files from Google, which receives the network and browser information needed to serve those requests. Any WhatsApp reminder is sent only when the feature is enabled and an administrator initiates the reminder workflow. Each provider's own privacy terms apply to information it receives.

7. Access, links and security

Administrator pages require a signed-in account and use role-based permissions. The app sets an HttpOnly, SameSite=Lax administrator session cookie that expires after 12 hours; it is marked Secure when the service is configured for HTTPS. Resident payment pages do not require a resident account or password. Anyone who has a resident's unique link can view that resident's name, room, monthly amount, current invoice and payment history. Deactivating a resident does not invalidate the link; deleting the resident record removes the resident and related invoice rows from the app database. Keep resident links private. The app uses access controls and other safeguards, but no online service can guarantee absolute security.

8. Retention and requests

The app does not currently have a fixed retention schedule or automatic deletion job. Resident and invoice records remain in the application database until an administrator deletes the resident; that action also deletes the related invoice rows from the app database. It does not control records that Cloudflare, Razorpay, Dutavo, WhatsApp or Google may retain under their own settings and terms. To ask about your information or request a copy, correction or deletion, contact the hostel administrator who manages your workspace. There is no resident self-service privacy-request form in the app. Some records may need to be retained where required for payment reconciliation or by law.

9. Changes and privacy contact

This notice may be updated when the service or its data handling changes. For privacy questions, requests or complaints about resident records, contact the hostel administrator who manages your workspace. Do not send passwords, UPI PINs, one-time passwords or full card details.