Sign in
Privacy Policy
Pasban (پاسبان — “guardian”) is a property management service for societies, towers and colonies. This policy explains what personal information we collect through our website and mobile apps, why we collect it, who we share it with, and the choices you have.
1. Who we are
Pasban is operated by Somezing (“Pasban”, “we”, “us”). We are the data controller for the information described in this policy. You can reach us at [email protected].
Pasban is provided to communities through their management. Where your management committee, society or landlord uploads records about you, they decide what to record and we process it on their behalf.
2. Information we collect
Account information
When you create an account we collect your email address, a password (stored only as a salted hash — we never store or see the password itself), and your display name. If you sign in with Google, we receive your Google account identifier and display name from Google instead of a password. You may optionally upload a profile photo.
Member and household records
If your community registers you as a member, Pasban may hold a fuller record. Depending on what your management enters, this can include:
- Name, guardian/father's name and membership number
- CNIC (national identity number)
- Date of birth, gender, marital status, nationality
- Occupation and company name
- Mobile number(s) and email address
- Permanent and mailing addresses
- Nominee details
Some of this is sensitive. We collect it only because community membership, unit registration and property transfers require verified identity, and we use it only for those purposes.
Property, payments and activity
- Property and tenancy records — the units you own or occupy, your role in a community, and registration or transfer records.
- Payment ledger — charges raised against you (rent, maintenance, installments, late charges), their status, and any payment receipts you or your management upload as proof.
- Service requests and complaints — what you submit, comments on it, and who it was assigned to.
- Documents — files you or your management upload to the document manager.
Pasban does not process payments. We do not collect card numbers, bank account numbers or payment credentials. Money changes hands outside Pasban; we record that it happened.
Technical information
- IP address — recorded when you sign up, sign in and perform actions, to detect abuse and rate-limit sign-in attempts.
- Audit log — administrator-visible records of actions taken in the system: who did what, to which record, when, whether it succeeded, and from which IP.
- Session cookie — a strictly necessary, HttpOnly cookie that keeps you signed in for up to 180 days. We do not use advertising or tracking cookies.
3. How we use information
| Purpose | Information used |
|---|---|
| Create and secure your account; sign you in | Email, password hash, Google identifier, IP |
| Run your community — units, tenancies, registrations, transfers | Member and property records |
| Show what you owe and what you have paid | Payment ledger, receipts |
| Handle service requests and complaints | Request content, comments, assignment |
| Send verification and notification email | Email address, display name |
| Prevent abuse, throttle sign-in attempts, investigate incidents | IP address, audit log |
We do not sell your personal information. We do not use it for advertising, and we do not use it to build profiles beyond what running your community requires.
4. Who we share information with
Inside Pasban, your information is visible to the people your community's structure implies — for example, your management committee can see the units, charges and requests for their property, and a service provider assigned to your request can see that request. Platform administrators can access records for support and safety.
We use a small number of service providers who process data on our behalf under contract:
| Provider | Purpose | Data involved |
|---|---|---|
| Amazon Web Services (S3) | File storage for uploads | Photos, receipts, documents |
| SendGrid (Twilio) | Sending system email | Email address, display name |
| Optional “Sign in with Google” | Google account identifier, display name | |
| Cloudflare | Website delivery and protection | IP address, request metadata |
We may also disclose information where we are legally required to, or where it is necessary to establish or defend legal claims, or to protect the safety of users.
5. How long we keep information
We keep your account and community records for as long as your account is active and you are associated with a community. Financial and ledger records may be kept longer where your community or applicable law requires a retained history. Audit log entries are retained for security and accountability. When information is no longer needed for these purposes, we delete it or anonymise it.
6. How we protect information
- Passwords are stored only as salted hashes.
- Sessions ride an HttpOnly cookie, marked Secure in production, so page scripts cannot read your session token.
- Per-user API responses are sent with no-store cache headers so they are never cached by a browser or a shared CDN.
- Repeated failed sign-in attempts are throttled.
- Access to records is scoped by role, and privileged actions are written to an audit log.
No system is perfectly secure, but we work to protect your information and to address issues promptly when they are reported.
7. Your rights and choices
Subject to applicable law, you can ask us to:
- Access a copy of the personal information we hold about you
- Correct information that is wrong or incomplete
- Delete your account and personal information
- Object to or restrict certain processing
- Withdraw consent where we rely on it
You can update your display name, photo and password yourself from My Profile in the app. For anything else, email [email protected] and we will respond within 30 days.
Where records were entered by your community's management, we may need to refer your request to them, or keep a record that your community is required to retain.
8. Deleting your account
You can request deletion of your Pasban account and associated personal information at any time by emailing [email protected] from the address registered to your account, or by asking your community's management to remove you. We will action the request within 30 days.
Some records may survive deletion of your account where we are required to keep them — for example a settled payment history your community must retain for its own accounts. Where that applies, we remove or anonymise your identifying details and keep only the record itself.
9. Children
Pasban is intended for adults responsible for a property or a tenancy. It is not directed at children, and we do not knowingly create accounts for anyone under 18. A community may record a household member who is a minor; that record is entered and controlled by the community's management. If you believe a child has created an account, contact us and we will remove it.
10. International transfers
Pasban is operated from Pakistan. Some of our service providers process data outside Pakistan. Where information is transferred internationally, we rely on the provider's contractual protections to keep it safeguarded.
11. Changes to this policy
We may update this policy as Pasban changes. We will update the “Last updated” date above, and where changes are significant we will tell you in the app or by email before they take effect.
12. Contact us
Questions, requests or complaints about privacy: [email protected].
If you are not satisfied with our response, you may have the right to complain to your local data protection authority.