Privacy Notice

1. Information We Collect

We collect information you provide directly: name, email, phone number, government ID (for KYC), payment details, and profile information. We also collect usage data, device information, location data (when permitted), and cookies.

2. How We Use Your Information

• To provide and improve our services — booking stays, connecting with hosts, processing payments
• To verify your identity (KYC) and prevent fraud
• To send booking confirmations, reminders, and important service updates
• To personalise your experience with recommendations and search results
• To comply with legal obligations under Indian law

3. Data Sharing

We share your information with hosts (for bookings), payment processors (Razorpay), cloud infrastructure providers (AWS), and communication services (for OTP and notifications). We do not sell your personal data to third parties.

4. Data Security

We use AES-256-GCM encryption for sensitive personal information, secure HTTPS connections, and follow industry-standard security practices. Payment data is handled by PCI-DSS compliant processors.

5. Data Retention

We retain your data for as long as your account is active. Booking records are retained for 7 years for tax and legal compliance. You can request deletion of your account and personal data at any time.

6. Your Rights

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent for data processing
• Port your data to another service

7. Cookies

We use essential cookies for authentication and session management, and analytics cookies (Google Analytics) to understand usage patterns. You can manage cookie preferences in your browser settings.

8. Contact

For privacy-related queries, contact our Data Protection Officer at privacy@ysafar.com.