Privacy Policy
Last updated: 14 September 2026. This policy explains how staynook ("staynook", "we", "us"), operated by Circle Technologies, collects, uses, shares and protects your personal data when you use our website, apps and services (the "Platform"). We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.
1. Who this applies to
staynook is a network for travellers, property hosts and independent local curators. This policy applies to everyone who uses the Platform in any of these roles.
2. Information we collect
• Account details you give us: name, email, phone, password, role, and profile information such as languages, bio and photo.
• Identity verification data: government-issued ID documents, a selfie, and nationality, which you submit to become "staynook Verified". This is processed through our KYC verification partner (see Sharing below). We store references and status, and document images are held in restricted storage accessible only to you and our internal admins via short-lived links.
• Booking & stay data: property, dates, guests, check-in details, and, for the guest register/compliance features, information required under applicable hospitality regulations (including for foreign nationals, as required by law).
• Payment-related data: records of amounts, payment mode and references. Card and bank credentials are handled by our payment processor, not stored by us.
• Content you create: listings, media, messages, posts, ratings and bill photos.
• Technical & usage data: device and log information, and cookies/local storage used to keep you signed in and remember preferences.
3. How we use your information
To create and manage your account; verify identity and build trust across the network; enable bookings, check-ins, payments records, messaging and local experiences; meet legal and regulatory obligations (including guest-register/compliance requirements); keep the Platform safe and prevent fraud; provide support; and improve our services.
4. Consent and legal basis
We process your data with your consent and as necessary to provide the services you request and to comply with law. You may withdraw consent for non-essential processing at any time; some features (such as verified check-in) may not work without the related data.
5. How we share information
We share data only as needed: with the property/host for your booking; with your chosen curators for experiences you book; with our KYC verification provider to check identity; with our payment processor to record/collect payments; and with infrastructure providers (our database, authentication and hosting are provided by Supabase and Vercel). We may disclose data where required by law or to protect rights and safety. We do not sell your personal data.
6. Storage, security and retention
Data is stored on managed cloud infrastructure with access controls (row-level security), and identity documents are kept in private storage served via expiring signed links. We retain personal data for as long as your account is active and as required for legal, tax and compliance purposes, after which it is deleted or anonymised.
7. Your rights
Subject to the DPDP Act, you may access, correct, update or request deletion of your personal data, withdraw consent, and nominate someone to exercise your rights. To make a request or raise a concern, contact our Grievance Officer at gostaynook@gmail.com. We will respond within the timelines required by law.
8. Cookies and local storage
We use essential cookies/local storage to keep you signed in and remember basic preferences. We do not use them to sell your data.
9. Children
The Platform is for users aged 18 and above. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.
11. Contact
Questions or requests: gostaynook@gmail.com, Circle Technologies, Hyderabad, Telangana, India.