Data Processing Agreement

Last updated: October 2026

HiPG is a product deployed under CSEDGE Pulse, a wing of CSEDGE (“HiPG”, “we”, “us”). This Data Processing Agreement (“DPA”) applies when you, as a PG owner or operator (the “Customer”), use HiPG to process personal data about your tenants, guests, staff and enquirers (“Customer Data”). It forms part of our Terms of Service.

1. Roles

The Customer decides why and how Customer Data is collected and is the data fiduciary / controller. HiPG processes Customer Data on the Customer’s behalf as a data processor, only to provide the Platform and as the Customer instructs.

2. Scope of processing

  • Purpose: hosting and operating the Platform: tenant records, allocations, billing, KYC documents, tickets, visitors, communications.
  • Data types: names, contact details, identity and address documents, emergency contacts, payment and billing records, usage data.
  • Duration: for the life of the Customer’s account and a reasonable period afterwards for export and deletion.

3. Customer responsibilities

The Customer is responsible for having a lawful basis and any required consents or notices for the data it enters, for the accuracy of that data, and for managing user access within its organisation.

4. HiPG responsibilities

  • Process Customer Data only on documented instructions, including the Customer’s use of Platform features.
  • Keep Customer Data confidential and limit access to personnel who need it to provide the service.
  • Apply reasonable technical and organisational safeguards, described on our Security page.
  • Notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer Data.
  • Help the Customer respond to requests from individuals exercising their data rights, where the Platform does not let them do so directly.

5. Sub-processors

HiPG uses third-party providers for cloud hosting and storage, payment processing (Razorpay), email delivery and, where the Customer enables it, WhatsApp messaging. HiPG remains responsible for these providers’ handling of Customer Data and will bind them to appropriate obligations. Contact us for a current list.

6. Return and deletion

On request, or after account closure, HiPG will make Customer Data available for export and then delete it within a reasonable period, except where law requires retention.

7. Audits and questions

On reasonable written request we will provide information needed to show compliance with this DPA. Contact support@hipg.in.