Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, email address, phone number, and preferences when you create an account, book a PG, or contact us. We also collect usage data including pages visited, search queries, and device information to improve our services.

2. How We Use Your Information

We use your information to provide and improve our services, match you with suitable PG accommodations, process bookings, send relevant notifications, and communicate with you about your account and our services.

3. Information Sharing

We share your contact information with PG owners only when you express interest in their listing. We do not sell your personal information to third parties. We may share aggregated, anonymized data for analytics purposes.

4. Data Security

We implement industry-standard security measures to protect your personal information, including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure.

5. Cookies

We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser.

6. Third-Party Services

We use the following third-party services to operate StayNest:

• Razorpay — Payment processing. When you make a payment, your transaction details (amount, payment method) are processed by Razorpay. We do not store your full card or bank account details. Razorpay's privacy policy applies to data they process.
• Cloudinary — Image and media storage. Property photos, KYC document images, and user avatars are stored on Cloudinary's servers. Cloudinary's privacy policy applies to data they process.

We only share the minimum information necessary for these services to function and encourage you to review their respective privacy policies.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specific retention periods are as follows:

• User activity data (page views, searches): 90 days
• Read notifications: 6 months
• Expired or rejected KYC documents: 1 year
• Financial records (payments, rent bills, receipts): Retained indefinitely for regulatory and tax compliance, even after account deletion
• Soft-deleted accounts: Anonymized account records are retained for 7 years after deletion for legal and regulatory compliance, then permanently erased
• Account data: Retained until you request deletion

8. Account Deletion

You can delete your account at any time by using the account deletion feature in your account settings, which calls our deletion endpoint at /api/users/me/delete. When you delete your account, we will: anonymize your personally identifiable information (name, email, phone number, and avatar are replaced with placeholder values), mark your account as deleted, and clear your authentication session. Financial records such as payments, rent bills, and receipts are retained for regulatory compliance but are no longer linked to your identity.

9. Identity Verification (KYC)

To ensure the safety of our community, we may collect identity documents for Know Your Customer (KYC) verification. Here is how we handle your KYC data:

• Document types collected: Aadhaar card, PAN card, or other government-issued identity documents as required.
• Minimal data storage: We store only the last 4 digits of your document number. Full document numbers are never retained in our database.
• Image retention: Document images are stored securely on Cloudinary and are deleted when your account is deleted or when the KYC record expires or is rejected (retained for up to 1 year after expiry/rejection).
• Right to request KYC deletion: You may request deletion of your KYC documents and associated images at any time by contacting us at privacy@staynest.in. We will process your request within 30 days, subject to any ongoing regulatory or legal obligations.

10. Your Rights

You have the right to access, update, or delete your personal information at any time. You can also opt out of marketing communications. Contact us at privacy@staynest.in for any privacy-related requests.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

12. Grievance Officer

In accordance with applicable data protection regulations, we have appointed a Grievance Officer to address your concerns regarding the processing of your personal information:

• Name: The Grievance Officer
• Email: grievance@staynest.in

The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 30 days of receipt.

13. Contact Us

If you have questions about this privacy policy, please contact us at privacy@staynest.in.