Security and privacy you can trust
Guest data is sensitive. HSTAY is built from the ground up to keep it protected.
How we protect your data
Security is not an afterthought. Every layer of HSTAY is built to keep guest data safe.
Encryption at rest and in transit
All guest data is encrypted using AES-256 at rest. Every connection uses TLS 1.2 or higher.
Role-based access control
Staff see only what they need. Owner, manager, and front-desk roles have separate permission levels.
Audit logs
Every action on a folio or guest record is logged with a timestamp and user identity.
Data residency in India
Guest data is stored on servers located in India, keeping you compliant with local data localisation expectations.
Right to deletion
Guests can request deletion of their personal data. Property owners can trigger deletion from the dashboard.
Incident response
We maintain an incident response plan and notify affected customers within 72 hours of a confirmed breach.