Privacy Policy

Last updated: June 2026

This Privacy Policy describes how TripInStays (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you use our website, mobile experiences, and related services (collectively, the “Platform”). By accessing or using the Platform, you agree to this Privacy Policy.

1. Scope

This policy applies to guests, property owners, partners, and visitors who interact with TripInStays. It does not cover third-party websites, owner-operated properties, or messaging/payment tools you may use after connecting with an owner off-platform.

2. Information We Collect

2.1 Information you provide

• Account details: name, email address, mobile number, and password (stored in encrypted form).
• Enquiry details: guest name, mobile, email, preferred dates, guest count, and messages when you request owner contact.
• Owner & partner details: business name, property information, KYC or verification documents where applicable, bank or payout details for subscription services.
• Communications: support requests, feedback, and correspondence with our team.
• Reviews: ratings, comments, and associated contact information you submit.

2.2 Information collected automatically

• Device and browser type, IP address, operating system, and general location (city/region level).
• Pages viewed, search queries, filters applied, referral URLs, and interaction with listings.
• Cookies, pixels, and similar technologies (see Section 8).

2.3 Information from third parties

• OTP and SMS/WhatsApp delivery providers for verification messages.
• Payment gateways (e.g. Razorpay, Stripe, PayU, PhonePe) for owner subscriptions — we do not receive full card numbers.
• Analytics and advertising partners, where enabled.

3. How We Use Your Information

We use personal data to:

• Create and manage user accounts and authenticate logins.
• Process OTP verification and deliver owner contact details after successful verification.
• Display property listings, personalise search results, and show saved properties or enquiry history.
• Send service-related SMS, WhatsApp, or email (OTP codes, enquiry confirmations, account alerts).
• Process owner subscriptions, invoices, and platform notifications.
• Improve the Platform, conduct analytics, and prevent fraud, abuse, or security incidents.
• Comply with applicable laws, respond to lawful requests, and enforce our Terms.
• Send marketing communications where you have opted in; you may unsubscribe at any time.

4. Legal Basis (India)

We process personal data based on your consent, performance of a contract (e.g. providing enquiry services), legitimate interests (security, analytics, product improvement), and compliance with legal obligations under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), where applicable.

5. Sharing of Information

We do not sell your personal data. We may share information with:

• Property owners: when you submit an enquiry or unlock contact, relevant guest details are shared with the listing owner.
• Service providers: hosting, email/SMS/WhatsApp delivery, payment processing, cloud storage, and customer support tools under confidentiality obligations.
• Legal & safety: regulators, law enforcement, or courts when required by law or to protect rights and safety.
• Business transfers: in connection with merger, acquisition, or asset sale, with notice where required.

6. Data Retention

We retain personal data only as long as necessary for the purposes described above, including legal, accounting, and dispute-resolution requirements. Enquiry and OTP logs may be retained for fraud prevention and audit purposes. You may request deletion subject to exceptions under law.

7. Security

We implement reasonable technical and organisational measures — including encryption in transit (HTTPS), access controls, and secure password hashing — to protect your data. No method of transmission over the internet is 100% secure; please use strong passwords and keep OTP codes confidential.

8. Cookies & Tracking

We use essential cookies for login sessions, CSRF protection, language preferences, and compare-list functionality. With your consent, we may use analytics cookies (e.g. Google Analytics) to understand usage. You can manage cookies through your browser settings; disabling essential cookies may affect Platform functionality.

9. Your Rights

Subject to applicable law, you may have the right to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete information via your account settings or by contacting us.
• Withdraw consent for marketing or optional processing.
• Request erasure or restriction of processing where legally permitted.
• Lodge a complaint with the Data Protection Board of India or relevant authority.

To exercise these rights, email privacy@tripinstays.com.

10. Children’s Privacy

The Platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us data, contact us for prompt deletion.

11. International Users

Our servers and primary operations are in India. If you access the Platform from outside India, your data may be processed in India or other jurisdictions where our service providers operate.

12. Third-Party Links

Listings may link to external maps, social media, or owner websites. We are not responsible for their privacy practices. Review their policies before sharing information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date. Continued use after changes constitutes acceptance.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder:

• Name: Grievance Officer, TripInStays
• Email: grievance@tripinstays.com
• Response time: We aim to acknowledge complaints within 48 hours and resolve within 30 days.

15. Contact Us

For privacy-related questions: privacy@tripinstays.com or visit Contact Us.