Privacy Policy

Last updated: 6 August 2026

1. Who this applies to

This policy covers two kinds of data: account data belonging to hotels and their staff who use Atithi PMS, and guest data that hotels enter into the Service. For guest data, the hotel is the data controller and Atithi PMS acts as a data processor on the hotel's behalf.

2. Information we collect

• Account data: hotel name, address, owner and staff name, email, phone, and login credentials, collected at registration.
• Guest data: name, contact details, ID documents, stay history, folio and billing records, entered by hotel staff during reservations, check-in and billing.
• Usage data: log-in activity, IP address, and actions on sensitive resources, captured in the append-only audit log for security purposes.

3. How we use information

• To provide the reservations, front desk, billing, housekeeping, POS, reporting and notification features of the Service.
• To generate GST-compliant invoices and financial reports on the hotel's behalf.
• To send transactional notifications (email, WhatsApp, in-app) that the hotel has configured, such as booking confirmations and payment receipts.
• To sync billing records to a hotel's own Tally installation, where the hotel has enabled that integration.
• To maintain the audit trail and secure the Service against unauthorized access.

4. Data sharing

We do not sell hotel or guest data. Data is shared only: with the hotel's own staff according to their role-based permissions; with third-party services the hotel explicitly enables (e.g. WhatsApp, Tally); and where required by law or a valid legal process.

5. Data storage and security

Each hotel's data is isolated at the tenant level. Sensitive fields are encrypted at rest, access is governed by role-based permissions, and mutating actions on sensitive resources are recorded in an audit log that cannot be edited or deleted.

6. Data retention

Account and guest data is retained for as long as the hotel's subscription is active, and afterwards only as long as needed to meet legal, tax and accounting record-keeping requirements.

7. Your rights

Hotel staff can access or correct their account details from within the app. Requests relating to guest data should be directed to the hotel where the stay took place, as they control that data; hotels can contact us for assistance fulfilling such requests.

8. Cookies

This marketing site and the Atithi PMS application use only the cookies/local storage required to keep you signed in and remember basic preferences — no third-party advertising trackers.

9. Changes to this policy

We may update this policy from time to time; material changes will be reflected by the "Last updated" date above.

10. Contact

Questions about this policy can be sent through the Contact link in the site footer.