1. Who we are
BangaloreStays (“BangaloreStays”, “we”, “us”, or “our”) operates the website bangalorestays.com, related domains, and the BangaloreStays mobile applications for Android and iOS (together, the “Services”).
We help guests discover and book verified short stays in Bangalore, and we help hosts list, verify, and manage those stays. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have.
This policy is written for travellers, hosts, and visitors who use our website or apps, including where those apps are distributed through the Apple App Store or Google Play.
2. Scope and consent
By creating an account, verifying a phone number or email, completing a booking, submitting host verification, or otherwise using the Services, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services.
Where Indian law (including the Digital Personal Data Protection Act, 2023) requires a specific consent for a purpose, we will ask for that consent separately. You may withdraw consent where the law allows, subject to legal or contractual limits (for example, we may need to keep booking records).
3. Information we collect
We collect information in three ways: you provide it, it is generated by your use of the Services, or it comes from trusted partners that help us authenticate, message, pay, map, or analyse the Services.
3.1 Account and profile
- Name and display name
- Email address
- Mobile number (typically an Indian +91 number)
- Sign-in markers for phone OTP and Google (we do not store SMS OTP codes in readable form after verification)
- Role (guest, host, or admin), account status, and profile preferences
- Profile photo or other details you choose to add
3.2 Authentication and identity
- One-time codes sent to your phone or email to sign in
- Firebase Authentication data when you sign in with a phone number (for example, a Firebase ID token that we verify on our servers)
- Google account identifiers and basic profile fields when you choose “Continue with Google”
- Session tokens (access and refresh tokens) stored securely so you stay signed in
3.3 Bookings and stays
- Search filters (dates, guests, location preferences)
- Booking requests, confirmations, cancellations, and trip history
- Messages or notes related to a stay
- Reviews and ratings you submit or receive
- Wishlist and similar saved items
3.4 Payments
- Payment amount, currency, booking reference, and payment status
- Payment processor references from Razorpay (we do not store full card numbers or UPI PINs on BangaloreStays servers)
- Refund and payout status where applicable
3.5 Host verification and payouts
If you list a property, we may collect:
- Government ID documents you upload for KYC (such as Aadhaar and PAN images or files)
- Bank account details needed for payouts (account number, IFSC, account holder name)
- Property details, photos, amenities, pricing, blocked nights, and calendar availability
- Host support tickets and compliance communications
3.6 Support and communications
- Support tickets, email, in-app messages, and WhatsApp conversations you start with us
- Notifications about bookings, security, or product updates
3.7 Device, usage, and diagnostics
- IP address, approximate location derived from IP, browser type, device model, OS version, and app version
- Pages and screens viewed, buttons tapped, referral URLs, and crash or performance logs
- Cookies, local storage, and similar technologies on the website
- Analytics events through Google Analytics / Firebase Analytics (configured with IP anonymisation where available)
3.8 Maps and location
- Map interactions and property coordinates shown on Google Maps
- Location you type into search (we do not require continuous background location tracking to use BangaloreStays)
3.9 Information we do not intentionally collect
We do not knowingly collect sensitive categories beyond what is needed for host KYC and payments. We do not sell personal information. We do not require access to your contacts, photos, or microphone except where you choose to upload media for a listing, profile, or verification.
4. How we use your information
We use personal information to:
- Create and secure accounts, and verify phone numbers or emails
- Show stays, process bookings, and send booking confirmations and updates
- Process payments and host payouts through Razorpay
- Verify hosts, review listings, and keep the marketplace trustworthy
- Provide customer support and resolve disputes
- Send transactional messages (OTP, booking, security). Marketing messages are sent only where allowed and you can opt out
- Improve search, product quality, fraud prevention, and safety
- Measure usage with analytics so we can improve the website and apps
- Comply with law, enforce our terms, and respond to lawful requests
5. Legal bases and purposes
Depending on the context, we process personal data because:
- Consent — for example, phone OTP or Google sign-in, optional analytics where consent is required, and marketing where required
- Contract — to provide bookings, host tools, payments, and support you request
- Legitimate use / legitimate interests — to secure accounts, prevent fraud, improve the Services, and understand aggregated product usage, balanced against your rights
- Legal obligation — tax, accounting, KYC expectations for hosts, and responses to lawful process
8. How long we keep information
We keep personal information only as long as needed for the purposes above, including:
- Account data — while your account is active and for a reasonable period afterward
- Booking, payment, and tax records — for the period required by law and dispute handling
- Host KYC and bank details — while you host and for compliance retention afterward
- OTP challenges — for a short period needed to verify the code and prevent abuse
- Support tickets and security logs — for as long as needed to resolve issues and protect the platform
- Analytics events — in aggregated or time-limited form according to our analytics tools
When information is no longer needed, we delete it or irreversibly anonymise it, unless a longer retention is required by law.
9. Security
We use administrative, technical, and organisational measures designed to protect personal information, including encrypted transport (HTTPS), hashed one-time codes, access-controlled servers, and role-based access inside BangaloreStays. No method of transmission or storage is completely secure. Please protect your devices and do not share OTP codes with anyone.
10. International transfers
BangaloreStays primarily serves users in India. Some processors (for example Google, Firebase, or infrastructure providers) may process data in other countries. Where that happens, we rely on appropriate contractual and organisational safeguards offered by those providers and applicable law.
11. Children
The Services are intended for adults who can form a binding contract. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.
12. Your rights and choices
Subject to applicable law, you may:
- Access the personal information we hold about you
- Correct inaccurate profile details from your account settings, or by contacting us
- Request deletion of your account and personal information, subject to legal retention needs. Follow the steps at https://bangalorestays.com/delete-account
- Withdraw consent for optional processing, such as marketing
- Opt out of non-essential analytics where your platform provides that control
- Lodge a complaint with the relevant data protection authority in India when available
To exercise these rights, email privacy@bangalorestays.com from the address linked to your account, or write to us using the contact details below. We may need to verify your identity before fulfilling a request.
13. Mobile apps and store disclosures
The BangaloreStays iOS and Android apps use the same account system as the website. Depending on platform and features you use, the apps may access:
- Internet connectivity
- Camera or photo library only when you upload listing, profile, or KYC media
- Approximate or precise location only if you grant permission for map or search features
- Push-notification permission only if we enable and you allow notifications
Apple App Store and Google Play privacy labels summarise categories of data linked to you. This Privacy Policy is the detailed source of truth and controls how we treat that data.
14. Third-party links and services
The Services may link to third-party sites or open third-party apps (for example WhatsApp, Razorpay checkout, or Google). Their privacy practices are governed by their own policies. We are not responsible for those services.
15. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. For material changes, we may also provide additional notice in the app or by email. Continued use of the Services after an update means you accept the revised policy, to the extent permitted by law.
16. Contact us
For privacy questions, requests, or complaints:
- Email: privacy@bangalorestays.com
- Support: support@bangalorestays.com
- WhatsApp: +91 98440 02111
- Website: https://bangalorestays.com
- Privacy Policy URL (for app stores): https://bangalorestays.com/privacy
Hosts may also reach host-support@bangalorestays.com.