Privacy policy

Last updated 3 November 2026

This policy explains what personal data Nearby Stays collects, why, who we share it with and the choices you have. [Registered business name], [Registered address], decides how your data is used (the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023). We only collect what we need to run your booking and the site.

1. What we collect

Booking details: lead guest’s name, phone (WhatsApp) number, email, number of guests, dates, the stay you book and any note you add.
Account details: if you sign in, your verified phone number or your Google account’s email and name.
Payment details: whether and when you paid, the amount and the payment reference. Card or UPI details are handled by our payment partner; we never see them.
Messages: what you send us on WhatsApp, SMS or email about a booking.
Device and usage data: basic technical data (browser, pages visited), and, only if you allow analytics cookies, how you use the site.
On your device only: the stays you viewed recently and your currency choice are kept in your browser, not on our servers.

2. Why we use it

To make, confirm, change and support your booking, and to send you booking messages (the main reason; you give us this data to book).
To let you sign in and see your bookings, and to keep accounts secure (for example, limiting repeated sign-in attempts).
To take payments, issue receipts and keep the records tax and accounting law requires.
To answer your questions and complaints.
With your consent: to measure and improve the site and our ads (analytics and advertising cookies), and to send offers.

We don’t sell your data. We share it only as needed:

Your host: your name, number of guests, dates and phone number, so they can prepare for and contact you about your stay.
Service providers who work for us: payments (Razorpay), sign-in and one-time codes (Google Firebase), email (Resend), website hosting (Vercel), database (Neon) and messaging (WhatsApp, a Meta service). They may only use your data to provide their service to us.
Analytics and advertising (only if you accept cookies): Google Analytics and the Meta Pixel.
Authorities: when the law requires it, for example guest registration rules or a lawful request.

Some of these providers store data outside India. We only use providers with appropriate safeguards, and never in a country the Government of India restricts.

4. How long we keep it

We keep booking and payment records for as long as tax and accounting laws require (generally up to 8 years), and account data while your account is in use. We delete or anonymise data we no longer need. Sign-in sessions expire after 30 days.

5. Your rights

You can ask us to:

tell you what data we hold about you and who we’ve shared it with;
correct or update it;
delete it, unless we must keep it by law (for example, payment records);
withdraw consent you gave (for example, to analytics cookies or offers) at any time; this doesn’t affect anything done before;
let someone you nominate exercise these rights if you die or are unable to.

To do any of this, message us on WhatsApp at +91 96505 95027 or email [support email]. If you’re not satisfied with our answer, you can contact our Grievance Officer (below) and then the Data Protection Board of India.

6. Cookies

We use a small number of essential cookies to keep you signed in and keep the site secure; these can’t be switched off. Analytics and advertising cookies (Google Analytics, Meta Pixel) are only set if you choose “Accept” in the cookie notice. You can change your choice any time with “Cookie settings” at the bottom of every page.

7. Children

Bookings must be made by an adult. We don’t knowingly collect data from children under 18 except names a parent or guardian gives us for a booking.

8. Security

We protect your data with encryption in transit, access controls and by storing only what we need (for example, sign-in tokens are stored only as secure hashes). If a breach affects you, we’ll tell you and the Data Protection Board as the law requires.

9. Grievance Officer

[Grievance officer name], [grievance email], [Registered address]. We acknowledge complaints within 48 hours and aim to resolve them within one month.

10. Changes

We’ll update this page if our practices change, and tell you about important changes. See also our Terms.