Privacy Policy

This Privacy Policy explains how StayCraft ("StayCraft", "we", "us") handles personal data in connection with the StayCraft platform — the websites and direct-booking tools we provide to homestays, guesthouses and similar properties ("Homestays").

Our role. For a Homestay's own account and site content, StayCraft acts as the data fiduciary. For the personal data of guests that a Homestay collects through its StayCraft site (enquiries, bookings, reviews), the Homestay is the data fiduciary and StayCraft acts as a data processor on the Homestay's behalf. Guests should also review the individual Homestay's own privacy notice where one is provided.

1. Personal data we handle

Guest data (collected through a Homestay's site)

• Name, phone number and email address.
• Requested check-in / check-out dates and number of guests.
• Any message you send through an enquiry, booking or review form.
• Payment reference or a payment-confirmation screenshot you upload to confirm a booking.

Homestay-owner data

• Account details (name, email, login credentials) and the content you publish on your site.
• Subscription and payment records for your StayCraft plan.

Collected automatically

• Basic technical data (IP address, device/browser, pages viewed) and cookies.
• Aggregate analytics where a site has connected Google Analytics.

2. Why we use it

• To deliver bookings and enquiries to the relevant Homestay and let them respond.
• To operate, secure and improve the platform.
• To process Homestay subscriptions and keep records required by law (including tax).
• To communicate with you about your enquiry, booking or account.

3. Consent and legal basis

Where you submit an enquiry, booking or review, you consent to the processing described here. You may withdraw consent at any time (see Your rights), though we may still retain data where the law requires. We process data under the applicable law, including India's Digital Personal Data Protection Act, 2023.

4. Cookies and analytics

We use essential cookies to run the site and, where enabled, analytics cookies to understand usage. You can control cookies through your browser settings.

5. Sharing

We share guest data with the Homestay you are enquiring about or booking with. We use trusted service providers (for hosting, email and analytics) who process data only on our instructions. We do not sell personal data. We may disclose data where required by law.

6. Payments

StayCraft does not operate a payment gateway for guest bookings; guests pay the Homestay directly (for example by UPI) and may upload a payment screenshot to confirm. We do not collect card or bank-account numbers from guests.

7. Retention

We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymise it. A Homestay may request deletion of guest data it controls.

8. Your rights

Subject to applicable law, you may request access to, correction of, or erasure of your personal data, and may withdraw consent. To exercise these rights, contact us at privacy@staycraft.co.in.

9. Grievance officer

For complaints about how your data is handled, contact our Grievance Officer: [Grievance Officer name — to be appointed], grievance@staycraft.co.in.

10. Children

The platform is not directed at children, and we do not knowingly collect their data without the consent required by law.

11. Changes

We may update this policy; the "last updated" date above shows the current version.

12. Contact

StayCraft, [Registered address — to be completed]. Email: privacy@staycraft.co.in. Governed by the laws of Himachal Pradesh, India.