MyHomestayLogin
Back to Home

Privacy Policy

Last updated: December 2025

1. Introduction

MyHomestay ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to Property Owners, their Staff, and Guests who use our services.

2. Information We Collect

2.1 Property Owner Information

  • Phone Number: Required for authentication via OTP (no email/password)
  • Name: Your full name for account identification
  • Business Name: Name of your homestay business
  • GST Number: Optional, for invoice generation
  • Property Details: Address, photos, amenities, policies
  • Bank/UPI Details: For displaying payment instructions to guests

2.2 Guest Information

  • Phone Number: Primary identifier (required)
  • Name: Full name for booking records
  • Email: Optional, primarily for international guests
  • ID Proof: As required by Property Owner (type, number, photo)
  • Address: Optional
  • Special Requests: Dietary needs, accessibility requirements, etc.

2.3 Automatically Collected Information

  • Device Information: Browser type, device type, operating system
  • IP Address: For security and consent tracking
  • Usage Data: Pages visited, features used, timestamps
  • Location: City/region (approximate, not precise GPS)

3. How We Use Your Information

3.1 For Property Owners

  • To provide and maintain your account
  • To process your subscription payments
  • To send transactional notifications (SMS/WhatsApp)
  • To provide customer support
  • To improve our services
  • To send product updates and announcements

3.2 For Guests

  • To process and manage bookings
  • To send booking confirmations and reminders (SMS only)
  • To facilitate communication with Property Owners
  • To enable repeat guest identification

4. Communication Channels

Important: We use different communication channels for different users:

  • Property Owners: WhatsApp Business API and SMS for transactional messages
  • Guests: SMS only for booking-related communications. We do NOT send WhatsApp Business API messages to guests.

Direct WhatsApp communication between Property Owners and Guests uses the Owner's personal WhatsApp number, not our platform.

5. Consent Management

We take consent seriously. Before sending any communication to Guests:

  • Explicit consent is obtained at booking time
  • Consent includes the Property name (multi-tenant branding)
  • Timestamp and IP address are recorded
  • Consent version is tracked for audit purposes
  • Guests can opt out by replying "STOP" to any message

6. Data Sharing & Disclosure

6.1 Within the Platform

Guest data is shared only with the Property Owner who received the booking. Property Owners cannot access guest data from other properties (multi-tenant isolation).

6.2 Third-Party Services

We use the following third-party services:

  • MSG91: For SMS and WhatsApp messaging (India-based provider)
  • Cloud Hosting: For data storage and processing
  • Analytics: For understanding platform usage (anonymized)

6.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority.

7. Data Security

We implement industry-standard security measures:

  • All data encrypted in transit (HTTPS/TLS)
  • Personal data encrypted at rest
  • Access controls and authentication
  • Regular security audits
  • Employee access limited on need-to-know basis

8. Data Retention

  • Booking Records: 7 years (per Indian tax/legal requirements)
  • Audit Logs: 2 years
  • Account Data: Until account deletion
  • Communication Logs: 1 year

9. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Export: Request your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

Property Owners can export their data even when their account is suspended.

10. Guest Data Rights

Guests can request data access, correction, or deletion by contacting the Property Owner directly. Property Owners are responsible for handling guest data requests for bookings made at their property.

11. Children's Privacy

Our platform is not intended for children under 18. Property Owners may collect information about children as part of family bookings, but this is managed by the Property Owner in compliance with their legal obligations.

12. Cookies & Tracking

We use essential cookies for:

  • Authentication and session management
  • Security (CSRF protection)
  • User preferences

We do not use advertising or third-party tracking cookies.

13. International Data Transfers

Our servers are located in India. If you access the platform from outside India, your information will be transferred to and processed in India.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via SMS or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

15. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

  • WhatsApp: +91 XXXXXXXXXX
  • Email: privacy@myhomestay.in

16. Grievance Officer

In accordance with Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are:

  • Name: [Grievance Officer Name]
  • Phone: +91 XXXXXXXXXX
  • Email: grievance@myhomestay.in

By using MyHomestay, you acknowledge that you have read and understood this Privacy Policy.