Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register or use our services, we may collect:

• Full name
• Email address
• Phone number
• User ID
• Address
• Hotel or property details (for business users)
• Guest details entered by hotel partners
• Profile photo (if uploaded)
• Identity documents (if provided)

1.2 Authentication Information

Aatithyah uses One-Time Password (OTP) verification for login and account security.

If OTP auto-detection is enabled:

• The OTP message may be accessed temporarily for verification.
• OTP data is processed ephemerally and is not stored.

1.3 Files and Documents

If users or hotel partners upload documents, we may collect:

• Identity verification documents
• Booking-related documents
• Compliance-related documents

1.4 Device and Technical Information

We may automatically collect:

• Device identifiers (e.g., Firebase Installation ID, push notification token)
• Crash logs
• Diagnostic data
• App interaction logs
• Session logs

This information is used strictly for security, analytics, and improving service performance.

1.5 Payment Information

Payments are processed through third-party payment gateways such as Razorpay.

We do not store complete debit or credit card details on our servers. Payment providers process financial information according to their own privacy policies.

2. How We Collect Data

We collect data through registration, app usage, and when you provide documents or make bookings.

Consent for Government ID Collection

Before capturing or uploading any government ID document, users are shown a clear consent notice explaining why the information is required. The user must explicitly agree before proceeding.

3. How We Use Your Information

We use collected information to:

• Create and manage user accounts
• Authenticate users using OTP
• Enable hotel booking and guest management
• Provide core application functionality
• Detect fraud and ensure compliance
• Monitor performance and fix technical issues
• Improve our services
• Provide customer support

We do not sell personal data to third parties.

4. How We Share Information

3.1 With Hotels and Property Partners

To provide our services, we may share relevant user information with hotels or property partners when authorized by the user (for example, after OTP verification).

This may include:

• Name
• Email address
• Phone number
• Booking details
• Uploaded documents (if applicable)

This sharing is necessary for booking confirmation, check-in, guest verification, billing, and compliance with hospitality regulations.

3.2 With Service Providers

We may share data with trusted third-party service providers that assist in operating our platform, such as:

• Cloud hosting providers
• Analytics providers (e.g., Cloudflare)
• Payment processors (e.g., Razorpay)
• Security and monitoring services

These providers process data only on our behalf and under contractual obligations.

3.3 Legal Compliance

We may disclose information if required by law, regulation, court order, or governmental request.

3.4 Business Transfers

In case of a merger, acquisition, restructuring, or asset transfer, user data may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure server infrastructure
• Access control and authentication systems
• Monitoring and logging for suspicious activity

While we take reasonable steps to protect your data, no system can guarantee complete security.

6. Data Retention

We retain personal information:

• As long as the account remains active
• As required to provide services
• As necessary for legal, tax, accounting, or regulatory compliance

Upon account deletion:

• Personal profile data will be deleted or anonymized
• Certain financial records, booking records, and audit logs may be retained as required by law

7. Collection of Government-Issued Identification Documents

Government ID Verification (Including Aadhaar or Other IDs)

To enable digital hotel check-in, the Aatithyah app may collect images of government-issued identification documents such as Aadhaar, Passport, Driving License, or Voter ID.

This information is collected solely for the purpose of identity verification during hotel check-in.

• ID images are transmitted securely using encryption.
• ID images are stored in encrypted form.
• Access to ID documents is restricted to the respective hotel and authorized system administrators.
• The ID document is used only for verification and compliance with hotel regulations.
• ID documents are automatically deleted after checkout or within a maximum retention period of 30 days, unless required by law.

Aatithyah does not use government ID information for advertising, profiling, or marketing purposes.

8. Data Retention

Government ID images are retained only for the duration necessary to complete hotel check-in and related compliance requirements.

Unless legally required otherwise, ID documents are permanently deleted after checkout or within 30 days, whichever occurs earlier.

Users may request earlier deletion via the in-app account deletion feature or by contacting support.

9. Security Measures

We implement industry-standard encryption in transit (HTTPS/TLS) and encryption at rest to protect sensitive data, including government ID documents.

Access to sensitive personal data is restricted and logged. We maintain technical and organizational safeguards to prevent unauthorized access, misuse, or disclosure.

10. Account Deletion

Users may request account deletion by visiting:

https://aatithyah.com/delete-account/

After verification:

• Account data will be permanently deleted
• Legal or financial records may be retained where required

Deletion requests are typically processed within 7-30 working days.

11. User Rights

Depending on applicable law, users may have the right to:

• Access their personal data
• Correct inaccurate information
• Request deletion of their data
• Withdraw consent
• Request data portability

To exercise these rights, contact us at:

support@codrex.in

12. Children’s Privacy

Aatithyah is not intended for individuals under 18 years of age.

We do not knowingly collect personal data from minors.

13. International Data Processing

Your data may be stored and processed on secure servers located in India or other jurisdictions where our service providers operate.

14. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

15. Contact Information

Codrex Digital (OPC) Private Limited

India

Email: support@codrex.in

Website: https://codrex.in/