Privacy policy

This is a template policy. It reflects how this platform actually handles data, but have a qualified advocate review it against the DPDP Act and any other applicable law before you launch commercially.

What we collect

• Account details: name, email address, phone number, and a hashed password.
• Booking details: guest name, contact details, stay dates and any special requests you enter.
• Partner details: business name, address, GSTIN/PAN where provided, and bank details for payouts.
• Usage data: searches performed, pages viewed, IP address and browser type.

Why we use it

• To take and confirm bookings, and to pass the details the property needs to host you.
• To process payments and refunds.
• To settle payouts to partners and raise the associated tax invoices.
• To send transactional messages: confirmations, cancellations, review requests.
• To detect fraud and abuse.
• To send marketing email, only if you opted in, with a one-click unsubscribe.

Who we share it with

The property you booked receives your name, phone number, email and any requests — they need these to check you in. They receive nothing before you book.

We also use service providers for payments, email delivery, mapping and hosting. Each receives only what it needs to do its job.

We do not sell personal data, and we do not share it for third-party advertising.

Payment data

Card and UPI details are handled entirely by our payment provider and never reach our servers. We store only a payment reference, the amount, the method type and the status.

Partner bank account numbers are encrypted at rest. Staff interfaces show only the last four digits.

How long we keep it

Booking, payment and payout records are financial records and are retained as long as tax and accounting law requires. Closing your account removes your profile but does not delete these records; where it does not conflict with that obligation, we anonymise what we can.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw marketing consent at any time. Write to hello@onerightsolution.com and we will respond within 30 days.

Cookies

We use a session cookie to keep you signed in and to hold your room selection through checkout, and a CSRF cookie to protect form submissions. Both are strictly necessary. We do not run third-party advertising trackers.