™ Version 2026-10 · Last updated 6 October 2026. This policy explains what personal data we collect and how we use it, under the Digital Personal Data Protection Act, 2023 and the IT Act, 2000.
1. Who is responsible
Appiesoft Web Solutions Pvt. Ltd., SCF 80 FF, Phase 11 Mohali, runs Stay in Bharat and is the Data Fiduciary for the personal data described here.
2. What we collect
- Account details: name, email, mobile number, password (stored encrypted), language.
- Booking details: dates, guests, rooms, property, messages with the host, check-in code use, reviews.
- Payment references: payment and refund IDs and amounts from Razorpay. We never see or store your card, UPI PIN or bank login.
- Hosts: business details, PAN, GSTIN, address, bank/payout references, ID and property documents (visible only to our verification team), listing content and photos.
- Technical data: IP address, device and browser type, and essential cookies that keep you signed in and secure.
- Optional: marketing preferences and analytics/advertising cookies – only if you choose "Accept all" in the cookie notice.
3. Why we use it
- To create and protect your account and verify your email and mobile number.
- To send booking requests, confirmations, reminders and receipts by email/SMS/WhatsApp.
- To take payments, issue invoices and refunds, and keep accounting and tax records.
- To share contact details between guest and host once a booking is confirmed.
- To check hosts and listings, prevent fraud and misuse, handle disputes and support tickets.
- To improve the website and, with your consent, show you relevant offers.
We use your data on the basis of your consent (which you give when you sign up and can withdraw) and for legitimate uses allowed by law, such as completing a booking you asked for or meeting legal obligations.
4. Who we share it with
- The other side of your booking – the host gets the guest's name and booking details; phone and email are shared after confirmation.
- Service providers who work for us under contract: Razorpay (payments), our email and SMS/WhatsApp providers, hosting, Google Maps (maps and address suggestions).
- Authorities when the law requires it (for example tax authorities or police requests made under law).
We do not sell your personal data.
5. How long we keep it
We keep account data while your account is active. Booking, invoice and payment records are kept for at least 8 years as required by tax and accounting laws. When you delete your account, we delete or anonymise your data except what we must keep by law.
6. Security
We use HTTPS, encrypted passwords and secrets, access limited by role, audit logs and daily backups. No system is perfectly secure; if a breach affects you, we will inform you and the Data Protection Board as the law requires.
7. Your rights
- See a summary of the personal data we hold about you.
- Correct or update it (most details can be edited in your account).
- Ask us to delete it, subject to what the law requires us to keep.
- Withdraw consent for optional uses such as marketing (it does not affect bookings already made).
- Nominate a person to exercise these rights if you die or become unable to.
- Raise a grievance with our Grievance Officer and, if unresolved, with the Data Protection Board of India.
8. Children
Accounts are for adults (18+). Children may be included in a booking made by a parent or guardian; we only record their number and, where needed, age.
9. Cookies
Essential cookies keep you signed in, remember your language and protect forms. Analytics and advertising cookies (Google Analytics, Google Tag Manager, Google Ads, Meta Pixel and Microsoft Clarity, which records how pages are used – clicks, scrolls and taps, with form fields hidden – to help us improve the site) load only if you choose "Accept all". Until you do, Google Analytics and Google Ads only receive cookieless signals (no cookies are set, no identifiers stored) so we can count visits. When you book or send a request, we tell Meta (Conversions API) that a booking happened, with the page address and your browser details; your email and phone (scrambled/hashed) are added only if you chose "Accept all". We also keep, in our own cookie, which link or ad brought you to the site, to see which of our ads work. You can change this anytime via Cookie settings in the footer.
10. Contact
Grievance Officer: Savita Sharma, info@stayinbharat.com.
General questions: info@stayinbharat.com.