1. Multi-Tenant Data Isolation
MMS is built on a secure multi-tenant SaaS architecture. This means each mess group is hosted inside its own logically isolated partition ("Tenant Workspace").
Data collected within your mess workspace is strictly confidential. It is mathematically and logically shielded so that other messes, groups, or external organizations hosted on the MMS platform can never view, retrieve, or query your operational data.
2. Types of Platform Data Processed
To operate our multi-mess software features, billing access, and notifications, we process:
Platform Account Info
We collect name, email address, profile credentials, and subscription status to license the software and maintain secure SaaS dashboard panels.
Isolated Tenant Ledgers
Wallet balances, UPI proof of transfer screenshots, daily bazar expenses, and cooking costs uploaded by members of a specific mess.
Attendance & Roster Logs
Meal attendance toggles and duty history data used by our prioritizer scheduling algorithm to compute local cost shares.
Device Subscriptions
Granular Web Push notification endpoints to alert users of upcoming meal schedules, pending approvals, and ledger updates.
3. Workspace Data Ownership
We believe in tenant data ownership. The records, expenses, receipts, and membership histories belong to the respective Tenant Mess. MMS only processes this information to:
- Generate real-time analytics dashboards for that specific mess manager.
- Automate cost calculation rates and execute the duty roster circular queue.
- Verify deposits inside that isolated group boundary.
We never share, trade, or distribute your private database records with external marketing companies.
4. Database Architecture & Supabase RLS
MMS is deployed on a highly secure cloud platform with multi-layered tenant security:
- Row Level Security (RLS): Our database runs strict RLS configurations on Supabase. This guarantees that query executions are bound by the user's active `mess_id`, ensuring no cross-workspace data leakage is physically possible.
- Storage Segregation: Payment proof images and invoice files are kept in distinct storage paths, only retrievable by members validated as part of that specific workspace ID.
5. Workspace Deletion & User Rights
You maintain control of your platform details:
- Account Deletion: You can choose to delete your platform profile. Platform-level personal markers (emails, platform billing records) are completely erased on request.
- Tenant Deletion: Mess managers can dissolve their hosted workspace. Dissolving a mess workspace permanently purges all transactional ledgers, attendance tables, and duty rosters associated with that tenant from our live systems.