Legal
Privacy Policy
Last updated: 5 October 2026
This Privacy Policy explains how StoriesUnlocked (Sole Proprietorship of Suresh Kumar Babbar), the operator of HotelSarrthi (“we”, “us”), collects, uses, shares and protects personal data when you visit our website or use the HotelSarrthi service. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.
1. Our two roles
- For hotel owners and staff who use HotelSarrthi, and for visitors who contact us, we decide how your personal data is used — we are the data fiduciary.
- For hotel guests whose details a hotel records in HotelSarrthi, the hotel is the data fiduciary and we process that data only on the hotel’s instructions — we are its data processor. Guests should contact the hotel first about their data; we will help the hotel respond.
2. What we collect
From hotel owners, staff and enquirers
- Name, mobile number, email address and role at the hotel.
- Property details — hotel name, address, rooms, tariffs, photos, amenities and OTA listing details.
- Billing details — plan, invoices and payment records. Card, UPI and bank credentials are collected and processed by our payment partner, not stored by us.
- Usage and technical data — log-in times, actions taken in the dashboard (kept as an audit log for security), IP address, device and browser type.
- Anything you send us when you contact us or raise a support request.
Guest data, entered by hotels
- Guest name, mobile number and email address.
- Identity document type and number where the hotel records it (for example, as required for guest registration).
- Booking details — dates, rooms, amounts, payments and booking source.
We do not knowingly collect personal data of children for our own purposes. We do not sell personal data.
3. How we use it
- To create and secure accounts, including sending one-time passwords (OTPs).
- To provide the Service — reservations, inventory, housekeeping, reports, and syncing availability and bookings with the OTAs a hotel connects.
- To process subscription payments, issue invoices and meet tax obligations.
- To respond to enquiries and provide support and onboarding help.
- To send service messages by SMS, email or WhatsApp — for example booking updates, payment reminders and important notices.
- To keep the Service secure, detect misuse and fix errors.
- To comply with law and respond to lawful requests from authorities.
We process personal data on the basis of your consent, to perform our contract with you, or for other legitimate uses permitted by law. You may withdraw consent at any time by writing to us; this will not affect processing already carried out, and some features may stop working.
4. Who we share it with
We share personal data only with service providers who help us run HotelSarrthi, under contracts that require them to protect it and use it only for that purpose:
- Cloud hosting and storage providers that host our servers, database and files.
- SMS providers that deliver OTPs and service messages.
- Meta (WhatsApp Business Platform) for WhatsApp messages.
- Our channel-manager partner and the OTAs a hotel chooses to connect, to sync availability, rates and reservations.
- Payment gateways and banks, to process payments and refunds.
- Error-monitoring tools that help us find and fix faults.
We may also disclose data where required by law, court order or a government authority, or to protect the rights, safety and property of our customers, guests or ourselves.
5. Where it is stored and how long we keep it
Data is stored on secure cloud infrastructure. Some service providers may process data outside India, subject to safeguards and to any restrictions notified under Indian law.
We keep personal data for as long as an account is active and as needed to provide the Service. After an account is closed, we delete or anonymise data within a reasonable period, except records we must keep by law — such as invoices and payment records — which we keep for the period the law requires.
6. How we protect it
- Encryption in transit (HTTPS) for all traffic to the website and dashboard.
- OTP-based sign-in and role-based access, enforced on our servers.
- Each hotel’s data is isolated from every other hotel’s.
- Audit logs of critical actions, and restricted access for our own staff.
No system is perfectly secure. If a personal data breach occurs, we will notify affected customers and the authorities as required by law.
7. Cookies
Our website uses only cookies and local storage that are strictly necessary for it and the dashboard to work, such as keeping you signed in. We do not use advertising cookies.
8. Your rights
Subject to applicable law, you may:
- access a summary of the personal data we hold about you;
- ask us to correct, complete or update it;
- ask us to erase it, where we are not required to keep it;
- withdraw consent you have given;
- nominate another person to exercise these rights on your behalf; and
- raise a grievance with us, and then with the Data Protection Board of India.
To exercise any right, email [TODO: support email — prefer support@hotelsarrthi.com]. We may need to verify your identity before acting on a request.
9. Grievance Officer
If you have a concern about how your personal data is handled, contact our Grievance Officer. We will acknowledge your complaint within 2 working days and resolve it within 30 days.
- Name: Suresh Kumar Babbar
- Email: [TODO: support email — prefer support@hotelsarrthi.com]
- Address: [TODO: address line 1], [TODO: address line 2], [TODO: City, State PIN], India
10. Changes to this policy
We may update this policy. The latest version is always on this page with its “Last updated” date, and we will notify customers of material changes. See also our Terms of Service.
11. Contact
- Business
- StoriesUnlocked (operator of HotelSarrthi)
- Proprietor
- Suresh Kumar Babbar
- Address
- [TODO: address line 1], [TODO: address line 2], [TODO: City, State PIN], India