1. Introduction
Growth Story Company ("we", "us", "our") operates HotelPilot.in, a multi-tenant hotel property management SaaS platform ("Service"). This Privacy Policy explains how we collect, use, store, and protect information when hotels ("Customer", "Property") and their staff use the Service, and how guest data entered into the Service by our Customers is handled.
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
a) Account & Staff Information: Name, email address, phone number, role, and login credentials of hotel staff who are given access to the Service by the Property owner or administrator.
b) Guest Information (entered by Customers): Guest name, contact number, email, ID proof details (as uploaded by the Property for KYC/registration purposes), stay history, billing details, and preferences. This data is entered and controlled by the Property; we process it strictly on the Property's instructions.
c) Billing & Transaction Data: Invoices, GST details, payment records, and folio history generated within the Service.
d) Technical Data: IP address, browser type, device information, log files, and usage patterns collected automatically for security and performance purposes.
3. How We Use Information
- To provide, operate, and maintain the Service (front desk, billing, housekeeping, reporting, and related modules).
- To authenticate users and enforce role-based access control.
- To generate GST-compliant invoices and reports on behalf of the Property.
- To provide customer support and respond to queries.
- To monitor for security incidents, fraud, and misuse.
- To send service-related communications (updates, maintenance notices, billing reminders).
- To improve and develop new features of the Service.
4. Data Ownership
All guest and operational data entered into the Service by a Property remains the property of that Property (the "Data Controller"). Growth Story Company acts as a "Data Processor" and processes such data only as necessary to provide the Service, and does not sell, rent, or share Property or guest data with third parties for marketing purposes.
5. Data Sharing & Disclosure
We do not sell personal data. We may share information only in the following circumstances:
- With sub-processors who help us host and operate the Service (e.g. cloud infrastructure and database providers), under confidentiality obligations.
- With OTA/channel manager partners, strictly where a Property has enabled such integrations.
- When required to comply with a legal obligation, court order, or governmental request.
- To protect the rights, property, or safety of the Company, our Customers, or the public.
6. Data Storage & Security
Data is stored on secure, access-controlled cloud infrastructure with encryption in transit. We implement role-based access control, row-level security at the database level, audit logging, rate limiting, and two-factor authentication (2FA) for user accounts. Access to production data is restricted to authorized personnel only.
While we take reasonable and industry-standard measures to protect data, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain Property and guest data for as long as the Property's subscription is active, and for a reasonable period thereafter to comply with legal, tax, and accounting obligations (typically as required under Indian law), after which it may be archived or deleted upon request, subject to statutory retention requirements.
8. Guest Rights
Guests whose information is processed within the Service may contact the relevant Property directly to request access, correction, or deletion of their personal information, as the Property is the data controller. The Property may in turn raise such requests with us through the contact details below.
9. Cookies
The Service and marketing website may use cookies and similar technologies for authentication, session management, and analytics. Please refer to our separate Cookie Policy for details.
10. Children's Data
The Service is intended for business use by hotel staff and is not directed at children. We do not knowingly collect personal data from individuals under 18 for account creation purposes.
11. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be notified to Customers via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Contact Us
Growth Story Company
Office No. 2, Second Floor, Opposite Zudio Clothing, Hatte Corner, Ganj Golai, Latur - 413512, Maharashtra, India
Email: Consult@Growthstoryco.in
Phone: 8007444464