Privacy Policy

How Hostsphere India Pvt Ltd (brand: Hostizzy) collects, uses, stores, and protects your personal information across all our platforms and services.

Last Updated: April 2026

1. Introduction

Hostsphere India Pvt Ltd, operating under the brand name Hostizzy ("we," "us," or "our"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with any of our platforms and services, including:

• Our corporate website at www.hostizzy.com
• Our booking platform at book.hostizzy.com
• Our property management system HostOS (hostos.hostizzy.com)
• Our owner portal ResIQ (resiq.hostizzy.com)
• Mobile applications (iOS and Android)
• WhatsApp Business communications
• AI-powered chatbot and conversational services
• Any other digital or offline services provided by Hostizzy

By accessing or using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of our services.

Registered Office: E 13/29, 1st Floor, Harsha Bhawan, Connaught Place, New Delhi 110001, India

2. Information We Collect

We collect different types of information depending on how you interact with our platforms. This includes information you provide directly, information collected automatically, and information from third-party sources.

2.1 Personal Information

Information you provide directly when registering, making inquiries, or using our services:

• Full name, email address, and phone number (including international numbers)
• Mailing address and billing address
• Government-issued identification (for KYC verification of guests and property owners)
• Date of birth (where required for identity verification)
• Professional or company information (for B2B partnerships)

2.2 Property Information (for Property Owners)

When you list or register a property with Hostizzy, we collect:

• Property location, address, and GPS coordinates
• Property type, size, bedroom count, and amenities
• Property photographs and virtual tour content
• Financial information including revenue data, bank details for payouts, and pricing preferences
• Existing OTA listing URLs (Airbnb, Booking.com, MakeMyTrip, etc.)
• Insurance and compliance documentation

2.3 Booking Information (for Guests)

When you make a booking through our platforms or partner OTAs, we collect:

• Check-in and check-out dates
• Number of guests and guest details
• Payment information (processed via secure third-party payment gateways)
• Special requests, dietary preferences, and accessibility requirements
• Guest reviews and feedback

2.4 Usage Data

Information collected automatically when you use our platforms:

• Pages visited, features used, and time spent on our platforms
• Device information (type, operating system, browser, screen resolution)
• IP address and approximate geolocation
• Referral URLs and search queries that led you to our services
• Click patterns, scroll depth, and interaction data

2.5 Communication Data

Information from your communications with us:

• WhatsApp Business messages (booking confirmations, guest communications, support inquiries)
• Email correspondence
• Phone call records and SMS messages
• Contact form submissions
• Chat transcripts from our website chatbot

2.6 AI Interaction Data

When you use our AI-powered features, we collect:

• Chatbot conversation transcripts (Floating Concierge)
• Revenue estimation inputs and outputs (AI Calculator)
• Dynamic pricing interaction data
• Property recommendations and search queries

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Processing bookings, managing check-ins/check-outs, and facilitating guest experiences
• Property management services including listing optimization, pricing, and maintenance coordination
• Managing owner payouts and financial reporting via ResIQ
• Coordinating housekeeping, maintenance, and guest support through HostOS

3.2 Communications

• Sending booking confirmations, reminders, and check-in instructions via email, SMS, or WhatsApp
• Guest-host communication facilitation
• Customer support and inquiry responses
• Service updates and important notifications about your account or property

3.3 AI-Powered Features

• Providing automated customer support through our AI chatbot
• Generating revenue estimates for property owners
• Dynamic pricing optimization based on market data
• Personalized property recommendations for guests
• Automated blog and content generation for property listings

3.4 Analytics and Improvement

• Understanding how users interact with our platforms to improve user experience
• Analyzing booking patterns, market trends, and occupancy data
• A/B testing and feature development
• Performance monitoring and bug resolution

3.5 Marketing (With Consent)

• Sending promotional offers, newsletters, and property management insights
• Targeted advertising on social media platforms
• Referral programs and loyalty communications
• Event invitations and webinar notifications

You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, replying "STOP" to WhatsApp marketing messages, or contacting us at privacy@hostizzy.com.

3.6 Legal Compliance and Fraud Prevention

• Complying with applicable Indian laws and regulations, including the Information Technology Act, 2000 and its rules
• Preventing fraud, unauthorized access, and other illegal activities
• Enforcing our Terms & Conditions
• Responding to legal processes, law enforcement requests, and regulatory inquiries
• KYC/AML compliance for financial transactions

4. WhatsApp & Messaging

Hostizzy uses the WhatsApp Business API (provided by Meta Platforms, Inc.) to communicate with guests, property owners, and prospective clients. By providing your phone number and consenting to receive WhatsApp messages, you agree to the following:

4.1 Types of Messages

We may send the following types of messages via WhatsApp:

• Transactional Messages: Booking confirmations, check-in/check-out details, payment receipts, and payout notifications
• Service Messages: Property updates, maintenance notifications, guest arrival alerts, and operational communications
• Support Messages: Responses to your inquiries, troubleshooting assistance, and follow-ups
• Marketing Messages (with explicit consent): Promotional offers, new service announcements, property management tips, and newsletters

4.2 Data Processed via WhatsApp

• Your phone number and WhatsApp profile name
• Message content (text, images, documents shared in conversation)
• Read receipts and delivery status
• Timestamp of messages

4.3 Opt-Out Mechanism

You can opt out of WhatsApp communications at any time by:

• Replying "STOP" to any WhatsApp message from Hostizzy
• Emailing privacy@hostizzy.com with your phone number and opt-out request
• Contacting us at +91-9560493335

Please note that opting out of transactional messages may affect our ability to provide you with essential service updates related to active bookings or property management.

4.4 Meta Platform Compliance

Our use of WhatsApp Business API is governed by Meta's Platform Terms and WhatsApp Business Policy. We do not sell, share, or use WhatsApp conversation data for advertising purposes beyond the scope of our direct business relationship with you. Message data is processed in accordance with Meta's data processing terms and this Privacy Policy.

5. Data Sharing & Third Parties

We do not sell your personal data to third parties. We may share your information with the following categories of service providers and partners, solely for the purposes described in this policy:

5.1 Cloud Infrastructure & Data Storage

• Google Firebase (Firestore): Secure storage of leads, contacts, booking data, chat logs, and application data
• Vercel: Website hosting and serverless function execution
• ImageKit: Image storage, optimization, and delivery for property photos

5.2 AI & Machine Learning

• OpenAI: Powers our AI chatbot, revenue estimation engine, and content generation tools. Data sent to OpenAI is anonymized where possible and is subject to OpenAI's data processing agreement. We do not send personally identifiable information to OpenAI unless required for the specific service interaction.

5.3 Analytics

• Google Analytics: Website traffic analysis, user behavior tracking, and conversion measurement. Data is aggregated and anonymized.

5.4 OTA Platforms

• We share necessary property and booking information with Online Travel Agencies including Airbnb, Booking.com, MakeMyTrip, Agoda, and other platforms where properties are listed. This sharing is essential for managing bookings and maintaining listing accuracy.

5.5 Payment Processors

• Payment information is processed by PCI-DSS compliant third-party payment gateways. We do not store complete credit card numbers or CVV codes on our servers.

5.6 Communication Services

• Google Gmail API (OAuth2): For sending transactional and notification emails
• Meta WhatsApp Business API: For WhatsApp communications as described in Section 4

5.7 Legal & Regulatory Disclosure

We may disclose your information if required by law, regulation, legal process, or governmental request. This includes compliance with Indian tax authorities, law enforcement agencies, and court orders.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platforms:

6.1 Essential Cookies

Required for basic site functionality including session management, authentication, and security. These cannot be disabled.

6.2 Analytics Cookies

Google Analytics cookies help us understand how visitors use our website, which pages are most popular, and how users navigate between pages. This data is aggregated and does not personally identify you.

6.3 Functional Cookies

These remember your preferences such as language, region, and display settings to provide a personalized experience.

6.4 Chat Persistence (localStorage)

Our AI chatbot uses browser localStorage to maintain conversation history during your session and across visits. This data is stored locally on your device and can be cleared through your browser settings.

6.5 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our platforms. Most browsers allow you to block or delete cookies. Please refer to your browser's help documentation for instructions.

7. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS). Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data. Admin panel access requires authenticated credentials.
• Firebase Security: Our Firestore database is protected by Firebase Security Rules, ensuring data isolation between users and properties.
• OAuth2 Authentication: Email services use OAuth2 authentication (not plain-text passwords) for enhanced security.
• Regular Audits: We conduct periodic security reviews of our codebase, infrastructure, and third-party integrations.
• Incident Response: We maintain an incident response plan to address any data breaches promptly. In the event of a breach affecting your personal data, we will notify you within 72 hours as required by applicable law.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical level of data protection.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Specific retention periods are as follows:

Upon expiry of the retention period, data is securely deleted or anonymized. You may request early deletion of your data (subject to legal and contractual obligations) by contacting us at privacy@hostizzy.com.

9. Your Rights

Under applicable Indian data protection laws and in line with global best practices, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Right to Object: Object to processing of your personal data for direct marketing purposes.
• Right to Lodge a Complaint: File a complaint with the relevant data protection authority if you believe your rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer:

• Email: privacy@hostizzy.com
• Phone: +91-9560493335
• Mail: Data Protection Officer, Hostsphere India Pvt Ltd, E 13/29, 1st Floor, Harsha Bhawan, Connaught Place, New Delhi 110001

We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@hostizzy.com, and we will take steps to delete such information promptly.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete that data from our systems.

11. International Data Transfers

Your personal data is primarily processed and stored in India. However, some of our third-party service providers (such as Google Firebase, OpenAI, and Vercel) may process data in other jurisdictions, including the United States.

When your data is transferred outside of India, we ensure appropriate safeguards are in place, including:

• Contractual obligations with data processors requiring equivalent data protection standards
• Use of service providers that comply with recognized data protection frameworks
• Encryption of data in transit and at rest

By using our services, you consent to the transfer of your data to jurisdictions outside India where our service providers operate, subject to appropriate safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you via email (to the email address associated with your account) for material changes
• We will post a prominent notice on our website
• For significant changes affecting data processing, we will seek renewed consent where required

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: