1. Who we are
CVV Technologies ("we", "us") builds billing apps, mobile apps, websites, ERP/CRM systems and Microsoft Dynamics 365 / Power Platform solutions. We are based at 10-2-705/2, Vijaya Durga Colony, Karimnagar – 505001, Telangana, India.
This policy covers (a) the website cvvtechnologies.com and (b) the software we publish, including apps listed on Microsoft AppSource. It follows the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India.
2. This website
What we collect
- Enquiry form. The form does not send data to our servers. When you press submit, it opens your own email app with your name, business, phone number and message filled in. We receive the details only if you send that email.
- Email, phone and WhatsApp. If you contact us, we receive what you send: your name, number or email address, and your message.
- Technical data. The site is hosted on GitHub Pages, and fonts load from Google Fonts. As with any website, these providers receive your IP address and browser details to deliver the page, under their own privacy policies.
What we don't do
- No cookies, analytics or advertising trackers are set by this site.
- We do not sell, rent or trade personal information.
Why we use it
Only to reply to your enquiry, prepare a quote or proposal, and provide services you ask for. We keep enquiry emails and chats for up to 24 months unless you become a customer, or ask us to delete them sooner.
3. Our business applications
Our Dynamics 365 / Power Apps solutions are installed in the customer's own Microsoft Dataverse environment. The customer (for example a housing society, facility manager or business) decides what information is entered and why. The customer is the data controller ("Data Fiduciary" under the DPDP Act); Microsoft hosts the data under the customer's agreement with Microsoft.
CVV Technologies does not receive, copy or host this data, and our solutions contain no code that sends it to us.
4. CVV Society & Facility Management
CVV Society & Facility Management is a model-driven Power Apps solution for housing societies, gated communities, apartment associations and facility management companies. It can hold the following personal information, entered by the customer's staff:
| Category | Examples |
|---|---|
| Residents, owners, tenants | Name, flat or villa, mobile number, email, move-in and move-out dates, vehicle numbers, emergency contact, committee role |
| Billing and payments | Maintenance bills, repair charges billed to a flat, amounts paid, payment mode and reference. Card and bank details are not stored. |
| Helpdesk | Complaints, descriptions, photos, ratings, feedback, parts and repair costs, committee approvals |
| Visitors and amenities | Visitor name, phone number, vehicle number, check-in and check-out times, amenity bookings |
| Staff and vendors | Names and contact details of staff users, vendors and suppliers |
| Portal sign-ins (optional) | Email, display name, a salted PBKDF2 password hash (never the password itself), last sign-in time, alert preferences |
How it is used
Only to run the society: raising and collecting bills, handling complaints and repairs, approving costs, managing amenities and the gate, sending notices and reminders, and producing reports for the committee.
Where it is stored
In the customer's Dataverse environment, in the Microsoft cloud region the customer selected (for example India).
5. CVV ProjectFlow 360
CVV ProjectFlow 360 is a model-driven Power Apps solution for project intake, cost estimation, configurable approvals, baselines and change control. It runs entirely inside the customer's own Microsoft Dataverse environment and can hold the following information, entered by the customer's users:
| Category | Examples |
|---|---|
| Users and teams | Names of requesters, project managers, approvers, delegates and team members (from the customer's Dataverse user records); manager relationships used for endorsement |
| Project requests and projects | Titles, descriptions, business justification, project type, priority, dates, phases, tasks, milestones and risks |
| Financial data | Cost estimates, cost lines, rate cards, budgets, baselines, change requests and actual costs |
| Approvals and audit | Approval steps, decisions, comments, delegation, escalation, and a governance audit log of who did what and when |
How it is used
Only to run the customer's project governance: routing requests for approval, calculating estimates and budgets, tracking delivery against approved baselines, notifying users inside the app and reporting on dashboards.
Where it is stored
In the customer's Dataverse environment, in the Microsoft cloud region the customer selected. ProjectFlow 360 does not call external services and does not send any customer data to CVV Technologies or to third parties.
6. Third-party services
The Dataverse solution itself sends no data outside the customer's environment. If a customer deploys the optional CVV Society Portal (in the customer's own Azure subscription) and turns on these features, the portal sends only what each feature needs:
| Service | Data sent | Purpose |
|---|---|---|
| Razorpay (India) | Amount, bill reference, payer name, email and mobile | Online payment of bills and bookings |
| Brevo | Recipient email or mobile number and message text | Email and SMS alerts: bills, receipts, complaint updates, visitor arrivals, notices |
| Microsoft (Dataverse, Azure) | All solution data | Hosting, under the customer's Microsoft agreement |
These providers process data under their own terms and privacy policies and the customer's agreements with them.
7. Our access to customer data
We access a customer's environment only when the customer asks for support, implementation or data migration and grants access, and only as far as that work needs. Our staff are bound by confidentiality. Any copies made for the work are deleted when it ends.
8. Security
- Role-based access through Dataverse security roles (Society Manager, Helpdesk & Front Office, Accounts, Security Guard) and a least-privilege Integration Service role for the portal.
- Encryption in transit (HTTPS/TLS) and at rest, provided by Microsoft Dataverse and Azure.
- Portal passwords stored only as salted PBKDF2 hashes, with lock-out after repeated failed sign-ins.
- Payment card data is handled only by Razorpay and never reaches our software.
If we become aware of a personal data breach affecting data we handle, we will inform the affected customer without delay so that they can meet their own notification duties.
9. Retention
Data in our applications stays in the customer's environment until the customer deletes it. Uninstalling a solution removes its tables and data. Customers should set their own retention rules, for example for visitor logs.
10. Your rights
Under the DPDP Act you can ask for access to, correction or erasure of your personal data, withdraw consent, and nominate someone to exercise these rights for you.
- For data held in a society's or business's system (for example as a resident or visitor), contact that society or business first, since they control it. If you can't reach them, write to us and we will pass on your request.
- For enquiries you sent us, contact us directly using the details below. We reply within 30 days.
11. Children
Our website and applications are meant for adults and businesses. Information about minors (for example family members recorded at a flat) should be entered only by a parent or guardian or with their consent.
12. Changes
We may update this policy. The date at the top shows the current version, and material changes will be noted on this page.
13. Contact & grievances
For privacy questions, requests or complaints, contact our Grievance Officer:
If you are not satisfied with our response, you may complain to the Data Protection Board of India once it accepts complaints under the DPDP Act.