Privacy policy

StayDirectNow is operated by StayDirectNow Technologies Private Limited (CIN U74909DC2026PTC471342), registered office at Kh. No. 317, Ground Floor, Extended Lal Dora Village, Nizampur, North West Delhi – 110081, Delhi.

Our role under the DPDP Act depends on whose data it is:

• Guest data. When you enquire with a property, that property decides why and how your details are used — it is the Data Fiduciary. We process your details on its behalf, as its Data Processor, under a written agreement with it. The property is responsible for how it uses your details once they reach it, including when it calls or messages you from its own phone.
• Owner and staff data. For accounts on our dashboard, we are the Data Fiduciary.

The chat on a property's page works from a menu, so almost everything you send is a choice you tap rather than something you type. When you send an enquiry, we collect only:

• your name and phone number;
• how many people are coming, if you tell us;
• the check-in date and number of nights you pick, if any;
• the occasion you pick from a fixed list (for example “Birthday” or “Family trip”), if any;
• the menu options you tapped in the chat, and when you gave consent.

We do not ask for your email address, address, date of birth, ID documents or payment details, and the chat has no free-text box. Properties are not allowed to upload photos of guests.

The property's own note about your stay. The property you enquired with may keep a private rating (1 to 5) and a short note about your stay, to help them if you enquire again. Only that property sees it — it is never shared with other properties or published. It is part of your data: you can ask to see it, have it corrected or have it deleted, and it is deleted with the rest of your data after 12 months.

Technical data. To stop the chat being misused — for example, a script sending enquiries in someone else's name — we briefly record your IP address and the phone number used, as counts against limits. These records are deleted automatically after two days.

• Account details: name, email address and password. Passwords are stored only as a one-way hash; nobody at StayDirectNow can read them.
• Contact details you give us for alerts: an email address and mobile numbers for SMS and WhatsApp.
• Property details you publish: name, address, public phone number, description, check-in and check-out times, amenities, answers to common questions, photos, and the names and languages of hosts you choose to show.
• Messages and files you send us through Help & Support.
• Login records: the IP address and browser of each signed-in session, and failed login attempts (to protect your account).

Whatever you publish on your property page is public by design: anyone can see it, and search engines and AI assistants can read it.

If you fill in our "Talk to us" form, or leave your details in the chat on our home page, we collect your name and mobile number, and — only if you give them — your email address, your property's name and location, and your message. We use them only to get back to you about StayDirectNow, and keep them for 12 months. The request is stored in our system and emailed to our own inbox.

Guest data — only to pass your enquiry to the property

• to send your enquiry to the property by email and text message, so it can contact you;
• to send you one text message confirming the property received your enquiry. The property can switch this off. It never says whether a date is available;
• to show the property your enquiry and chat on its dashboard;
• to prevent abuse of the chat, as described in section 2.

We do not send guests marketing, reminders or offers, and we do not use your details for anything else. The legal basis is the consent you give by ticking the box before you send your enquiry.

Owner and staff data

• to run your account and your property page;
• to send you enquiry alerts and account emails such as password resets;
• to answer support requests;
• to keep the service secure and to meet our legal obligations.

The property you enquire with receives your enquiry. Nobody else does — except the services below, which we use only to deliver the service, under contracts that let them use the data solely on our instructions:

Transfers outside India. Some of these services are based outside India, as shown above. The DPDP Act permits this except to countries the Government of India restricts, and we do not use any. We are moving these services to providers in India and will update this table when we do.

We may also disclose personal data where Indian law requires it, for example to a court, the Data Protection Board of India or CERT-In.

• Guest details and enquiries: 12 months from your most recent enquiry with that property, then deleted.
• Records of messages we sent (to whom, when, and whether it went through — never the message itself): 12 months.
• “Talk to us” requests: 12 months.
• Abuse-prevention records (IP addresses and phone numbers counted against limits): 2 days.
• Password-reset records: 7 days.
• Owner accounts: for as long as the account is open. You can delete your account from Settings: it is deleted 7 days after you ask, unless you choose to keep it in that time, and your property goes offline as soon as you ask. When an account closes we delete its data, except invoices and records that tax and company law require us to keep, and security logs kept for the period Indian law requires.
• Records of our own staff opening guest data in our admin tools: 12 months, as evidence of who accessed what.

Deleted data also leaves our backups as those backups expire, within 30 days.

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• ask us to erase it;
• withdraw your consent at any time — as easily as you gave it;
• nominate someone to exercise these rights if you die or cannot act;
• complain to us, and then to the Data Protection Board of India.

To use any of these, write to privacy@staydirectnow.com from, or mentioning, the phone number or email address concerned. If you are a guest, you can also ask the property directly; for guest data we act on the property's instructions and will pass your request to it and help it answer. Withdrawing consent does not undo processing that already happened, and the property may already have your number from your enquiry.

We use no advertising, analytics or tracking cookies of any kind.

• Login cookie — keeps owners and staff signed in to the dashboard. Essential; it is set only when you log in.
• Theme cookie — remembers whether you chose light or dark mode in the dashboard.
• Chat session storage — the guest chat remembers its conversation in your browser tab, so reloading the page continues it. It is cleared when you close the tab.
• Visit counting — when a property page opens, it tells our server so the property can see how many people visited and where they came from (for example Google or Instagram). No cookie is used and your IP address is not stored: to count one person once a day we keep a one-way code made from your connection and browser with a key that changes daily, which cannot identify you and is deleted after two days. Only daily totals are kept.

• All traffic to our site is encrypted in transit (HTTPS).
• Passwords and password-reset codes are stored only as hashes.
• Each property can see only its own guests. Our staff can open guest data only through admin tools that record every access.
• Logins and the guest chat are rate-limited to resist guessing and misuse.

If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, and report to CERT-In, as Indian law requires.

To report a security problem with our service, write to security@staydirectnow.com.

StayDirectNow is not meant for anyone under 18. Guests under 18 should not send enquiries; a parent or guardian should enquire instead. If we learn that we hold a child's data without verifiable parental consent, we will delete it.

We will update this page when our practices change and change the date at the top. If a change affects how we use personal data we already hold, we will tell property owners by email before it takes effect.

For any question or complaint about personal data, contact our Grievance Officer, Chirag Chhillar, at grievance@staydirectnow.com, or write to StayDirectNow Technologies Private Limited, Kh. No. 317, Ground Floor, Extended Lal Dora Village, Nizampur, North West Delhi – 110081, Delhi. We will acknowledge your message and resolve it within the time Indian law requires.

See also our terms of service.