Privacy Policy

1. Information We Collect

1.1 Personal Information

We may collect information including:

• Full name
• Email address
• Mobile number
• User ID
• Hotel or property information
• Staff information
• Business information
• Booking-related details
• Profile photo (if uploaded)

1.2 Authentication Information

Aatithyah uses OTP (One-Time Password) authentication and account verification systems.

If OTP auto-detection is enabled:

• OTP messages may be temporarily processed for verification purposes.
• OTP information is processed ephemerally.
• OTP content is not permanently stored.

1.3 Guest Information Processed Through Hotels

Hotels and hospitality partners using the Aatithyah platform may collect guest information, identity documents, booking records, and verification-related information through the platform for lawful hospitality operations and compliance purposes.

Such information may include:

• Guest names
• Contact information
• Booking information
• Government-issued identification documents
• Check-in/check-out records
• Verification-related records
• Billing-related information

Such information is processed and stored by Aatithyah on behalf of the respective hotel or hospitality establishment.

Hotels and hospitality establishments remain solely responsible for:

• obtaining guest consent,
• lawful guest onboarding,
• lawful collection of guest information,
• and compliance with applicable hospitality, privacy, taxation, and regulatory obligations.

2. Device & Technical Information

We may automatically collect technical information including:

• Device identifiers
• Firebase installation identifiers
• Push notification tokens
• Crash logs
• Diagnostic information
• Session activity
• App interaction logs
• Security logs
• IP addresses

This information is used for security, fraud prevention, analytics, performance monitoring, diagnostics, and improving platform functionality.

3. Payment Information

Payments may be processed through third-party payment providers such as:

• Razorpay
• Cashfree
• Other payment gateways

We do not store complete debit card, credit card, banking, or UPI credentials on our servers.

Payment providers process financial information according to their own privacy policies and regulatory obligations.

4. How We Collect Information

We may collect information through:

• account registration,
• app usage,
• hotel onboarding,
• guest check-in workflows,
• booking operations,
• uploaded documents,
• support requests,
• and payment transactions.

5. How We Use Information

We may use collected information to:

• create and manage accounts,
• authenticate users,
• enable hotel operations,
• facilitate bookings and guest management,
• support digital check-in processes,
• assist hospitality verification workflows,
• process payments,
• provide customer support,
• detect fraud and abuse,
• improve platform services,
• maintain security,
• comply with legal obligations,
• and enforce platform policies.

We do not sell personal information to advertisers or data brokers.

6. How We Share Information

6.1 With Hotels and Hospitality Partners

Hotels and hospitality partners using the Aatithyah platform may collect and manage guest information through the platform for lawful hospitality operations and regulatory compliance.

Information may be made accessible to the respective hotel or authorized hotel personnel for purposes including:

• booking management,
• guest verification,
• check-in and check-out operations,
• billing,
• hospitality operations,
• customer support,
• and regulatory compliance.

Hotels and hospitality establishments are solely responsible for obtaining necessary guest consent, lawful collection of guest information, and compliance with applicable laws and regulations.

6.2 With Service Providers

We may share information with trusted third-party service providers assisting in platform operations, including:

• cloud infrastructure providers,
• analytics providers,
• payment processors,
• communication providers,
• cybersecurity services,
• and operational support providers.

Such providers process information only on our behalf and subject to contractual obligations.

6.3 Legal Compliance

We may disclose information where required by law, court order, governmental request, regulatory obligation, legal process, or law enforcement request.

6.4 Business Transfers

In the event of merger, acquisition, restructuring, financing, or asset transfer, information may be transferred as part of the business transaction.

7. Guest Identity Documents & Verification Information

Hotels and hospitality partners using the Aatithyah platform may collect and upload government-issued identification documents through the platform for lawful hospitality operations and guest verification purposes.

This may include:

• Aadhaar
• Passport
• Driving License
• Voter ID
• Other government-issued identification documents

Such information may be processed and securely stored by Aatithyah on behalf of the respective hotel or hospitality establishment.

Government-issued identification information is used solely for:

• hotel check-in procedures,
• guest verification,
• booking validation,
• fraud prevention,
• safety and security purposes,
• and applicable legal or regulatory compliance obligations.

Aatithyah acts as a technology platform provider and does not independently certify, authenticate, or guarantee the validity or authenticity of any government-issued identification document.

Hotels and hospitality establishments remain solely responsible for obtaining necessary guest consent, lawful collection and usage of guest documents, compliance with hospitality regulations, and compliance with applicable privacy and data protection laws.

We do not sell, rent, trade, or monetize government-issued identification data.

Access to such information is restricted to authorized hotel personnel and authorized system administrators where operationally necessary.

8. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption,
• encryption at rest where applicable,
• access controls,
• authentication systems,
• audit logging,
• activity monitoring,
• role-based access restrictions,
• and cybersecurity protections.

While we take reasonable measures to protect information, no digital system can guarantee complete security.

9. Platform Role & Hospitality Compliance

Aatithyah is a hospitality technology platform operated by Codrex Digital (OPC) Private Limited.

The platform provides software infrastructure, operational systems, booking tools, and hospitality verification assistance for hotels and hospitality businesses.

Hotels and hospitality establishments remain solely responsible for:

• lawful guest onboarding,
• obtaining guest consent,
• hospitality compliance,
• guest verification obligations,
• police or FRRO reporting,
• taxation obligations,
• and compliance with applicable local, state, national, or international laws.

Aatithyah acts as a technology service provider and data processor supporting hospitality operations.

10. Data Retention

We retain personal information, booking records, operational records, audit logs, verification-related information, and compliance-related records for durations necessary to:

• provide platform services,
• maintain hospitality operations,
• comply with taxation and accounting obligations,
• satisfy hospitality compliance requirements,
• resolve disputes,
• prevent fraud and abuse,
• enforce agreements,
• and comply with applicable legal or regulatory obligations.

Certain booking records, invoices, audit logs, verification-related records, financial records, and compliance-related information may continue to be retained even after account deletion requests where legally or operationally required.

Upon account deletion:

• profile information may be deleted or anonymized,
• while legally required operational, financial, taxation, audit, fraud prevention, and compliance records may continue to be retained.

11. Account Deletion

Users may request account deletion by visiting:

Delete Account Page

Following verification and processing:

• account access may be disabled,
• profile information may be deleted or anonymized,
• and certain operational, booking, audit, compliance, fraud prevention, taxation, and legally required records may continue to be retained where necessary.

Deletion requests are generally processed within 7–30 working days.

12. User Rights

Depending on applicable law, users may have rights to:

• access their information,
• request correction of inaccurate data,
• request deletion,
• withdraw consent where applicable,
• and request additional information regarding data processing.

Requests may be submitted to:

support@codrex.in

13. Children’s Privacy

Aatithyah is intended for hospitality businesses and users aged 18 years or older.

We do not knowingly provide services intended for children under 18 years of age.

14. International Data Processing

Information may be processed and stored on secure servers located in India or other jurisdictions where our infrastructure or service providers operate.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Updated versions will be published on this page with a revised effective date.

Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.

16. Contact Information

Codrex Digital (OPC) Private Limited

India

Email: support@codrex.in

Website: Codrex Digital