Privacy Policy

Last updated: February 2026

Information We Collect

We collect information you provide directly, including: account registration details (name, email, phone, business name); property configuration data; and guest data entered into the platform (name, contact details, government ID documents, selfies, stay preferences, and service requests). We also collect usage data such as log files, IP addresses, browser type, and feature interaction events.

How We Use Information

We use collected information to: provide and operate the HSTAY platform; authenticate users and guests; facilitate digital check-in and identity verification; generate invoices and billing records; send service and account notifications; improve the platform through aggregated analytics; and comply with legal obligations such as local guest registration requirements.

Data Storage & Security

All data is stored on servers located in India. We use AES-256 encryption at rest and TLS 1.2 or higher for data in transit. Access to guest data within the platform is restricted by role-based permissions. We conduct regular security reviews and maintain an incident response plan.

Third-Party Services

We use selected third-party services to operate the platform, including cloud infrastructure providers, email delivery services, and analytics tools. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes. We do not sell personal data to any third party.

Your Rights

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing in certain circumstances; and receive a copy of your data in a portable format. To exercise these rights, contact us at [email protected]. Property owners can also delete guest records directly from the dashboard.

Data Retention

We retain account and property data for as long as your account is active. Guest folio data is retained for a minimum of one year to support compliance and dispute resolution, after which it may be deleted on request. When an account is closed, all data is deleted within 30 days unless we are required by law to retain it longer.

Children's Privacy

The HSTAY platform is intended for use by property owners and their staff, who must be 18 years of age or older. We do not knowingly collect personal data from anyone under 18. Guest data may include minor guests as part of a family booking, and property owners are responsible for handling such data in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the platform at least 14 days before the change takes effect. Continued use of the Service after the effective date of any change constitutes acceptance of the updated policy.

Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at [email protected] or write to Tatxtion Tech, Bengaluru, Karnataka, India.