Privacy Policy

1. Scope and our role

This policy applies to personal data we process when you visit our website, create an account, or use StayBind. For data about an Operator and its team (account and billing data), we act as a data fiduciary. For personal data about an Operator's Guests that the Operator uploads or generates through the Platform, the Operator is the data fiduciary and we act as a data processor that handles that data only on the Operator's instructions and to provide the service.

2. The data we collect

• Account data: name, business name, email address, phone number, and login credentials of the Operator and invited team members.
• Property and booking data: property details, availability, bookings, and operational records you enter or sync.
• Guest data uploaded by Operators: Guest name, contact details, stay details, identity or KYC documents where you choose to collect them, and messages exchanged with Guests.
• Payment-related data: subscription and transaction metadata such as amounts, status, and gateway references. We do not collect or store full card numbers or banking credentials; these are handled by the Payment Gateway.
• Usage and device data: log data, IP address, device and browser information, and analytics about how the Platform is used.
• Communications: messages you send to our support and your preferences.

3. How we use personal data

• To provide, operate, secure, and improve the Platform and its features.
• To set up accounts, authenticate users, and manage subscriptions and billing.
• To facilitate guest messaging, bookings, channel synchronisation, and payments that you initiate.
• To provide support and to communicate service, security, and transactional notices.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and to enforce our agreements.

4. Legal basis and consent

We process personal data on the basis of your consent, to perform our contract with you, to comply with legal obligations, and for other legitimate uses permitted by the DPDP Act. Where we rely on consent, you may withdraw it at any time, which will not affect processing carried out before withdrawal. If you provide personal data about other people (for example your Guests), you confirm that you have the necessary basis to share it with us for processing.

5. How we share data

We do not sell personal data. We share it only as needed to run the service and as described here:

• Service providers and sub-processors that host, secure, and support the Platform (for example cloud hosting, communication, and analytics providers), under appropriate confidentiality and security obligations.
• Payment gateways and financial partners to process subscription payments and to facilitate guest payments where the Operator is the merchant of record.
• Channel partners, online travel agencies, and messaging providers that you connect, to synchronise bookings and deliver messages you initiate.
• Authorities or third parties where required by law, to protect rights and safety, or in connection with a corporate transaction.

6. Payment information

Payments are processed by third-party payment gateways. Sensitive payment details such as card numbers and banking credentials are entered on, and handled by, the gateway, not by us. We receive only the transaction metadata needed to confirm and reconcile payments.

7. Data storage and transfers

We aim to store personal data on infrastructure located in or serving India. Where data is processed outside India by a sub-processor, we do so in accordance with applicable law and subject to appropriate safeguards.

8. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, and thereafter for the period required to meet legal, tax, accounting, and dispute-resolution obligations. When data is no longer required, we delete or anonymise it. Operators may request deletion of Guest data they control, subject to records we must keep by law.

9. Security

We implement reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, audit logging of sensitive actions, and least-privilege access. No method of transmission or storage is perfectly secure, and you are responsible for keeping your credentials confidential.

10. Your rights

Subject to the DPDP Act, you have the right to access a summary of your personal data and our processing, to seek correction or completion, to seek erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to grievance redressal. To exercise these rights, contact our Grievance Officer below. Where we act as a data processor for an Operator's Guest data, requests from Guests should be directed to the relevant Operator, and we will assist the Operator as required.

11. Cookies

We use cookies and similar technologies that are necessary to operate the website and the Platform (for example to keep you signed in) and to understand usage so we can improve the product. You can control cookies through your browser settings; disabling some cookies may affect how the service works.

12. Children

The Platform is intended for businesses and is not directed at children. We do not knowingly collect personal data of children except as a Guest detail provided by an Operator for a booking, for which the Operator is responsible for obtaining any required consent.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date and, where appropriate, notify you of material changes. Your continued use of the Platform after the changes take effect constitutes acceptance of the updated policy.

14. Grievance Officer and contact

In accordance with the DPDP Act and applicable rules, you may contact our Grievance Officer for any privacy question, request, or complaint by email at support@staybind.com. You may also write to us at StayBind Technologies Private Limited, Praneeth Reddy Kuraparthi, Flat no-101, Archie's Shantinivas Apartment, Chaitanyapuri, Hyderabad, Telangana 500035, India. We will acknowledge and address grievances within the timelines required by law.