Privacy Policy

You do not have an account with us and never interact with our service directly. A property you stayed at entered your details, and after your stay may have recorded a rating and a written review.

What the property records about you:

• your full name and mobile number (required by the property);
• your email address, if you gave one (optional);
• the last 4 digits only of your Aadhaar number, if you gave them (optional);
• your check-in and check-out dates;
• a 1–5 star rating and written review of your stay, written by the property.

We never collect or store a full Aadhaar number, and we never ask for or hold any identity document, photograph, payment card, or bank detail belonging to a guest.

These four digits help the property confirm they are looking at the right guest record. They are also used to recognise a returning guest — but only together with a matching name, never on their own. Four digits are shared by far too many unrelated people to identify anyone by themselves, so matching is primarily by mobile number or email address.

Providing them is optional. A property should not refuse you a room for declining to give them, and you may ask the property not to record them.

If you check in at a different property that also uses Stay Clean, and your mobile number or email matches an existing record — or your Aadhaar last-4 and your name both match — that property is shown any past review of you rated below 3 stars.

They see the review text, the star rating, the date, and the cityof the property that wrote it. They are never shown that property's name, address, or contact details.

Reviews of 3 stars or above are never shared with another property. Nothing is shared until a property actively attempts to check you in — there is no public listing of guests, and no property can browse or search the database.

The property that records your details is responsible for informing you and for obtaining any consent required by law. Our Terms of Service require every property to do so. We provide the technical platform on which those records are stored and matched.

[FOR LEGAL REVIEW] The precise allocation of Data Fiduciary and Data Processor roles between Jhankar Singh, sole proprietor, trading as Viral Nest and the property owner under the Digital Personal Data Protection Act 2023, and the mechanism by which valid guest consent is obtained and recorded when the guest never interacts with this platform, require legal determination before launch. This section is provisional.

You may contact us at any time to:

• ask what data about you is held on the platform;
• dispute or ask for the correction of a review you believe is false or unfair;
• request permanent deletion of your record and all associated reviews.

stayclean709@gmail.com

Include your full name and the mobile number used at check-in so we can locate and verify the record. Deletion is permanent and removes every stay and review associated with you at every property, not only the property you contacted us about.

We verify each request before acting, because a guest record spans multiple unrelated businesses and no single property has authority over it. For that reason there is no self-service deletion button, and no property owner can delete a guest record.

We hold your name, property name and type, city, room count, email address, WhatsApp number, and your subscription status. Payment is handled by Razorpay — we never see or store your card details.

We also log which owner account looked up which guest record, and when. This is an internal audit trail for accountability over access to guest data; it is not visible to any owner.

We do not sell personal data or use it for advertising. We share it only with:

• Supabase — database and authentication hosting;
• Vercel — application hosting;
• Razorpay — subscription payments (owner billing data only, never guest data);
• law enforcement or courts, where we are legally required to do so.

Guest records are not directly readable by any property owner. All access runs through controlled server-side queries scoped to the requesting account, so no owner can read another property's data or extract the guest database. Traffic is encrypted in transit, and every access to a guest record is logged.

No system is perfectly secure. If a breach affecting personal data occurs, we will notify affected parties and the relevant authority as required under the DPDP Act 2023 and its Rules.

Guest records and reviews are currently retained indefinitely, because a guest's history is what makes the service useful. This is under review and a defined retention period will be published following legal advice. You may request deletion at any time under section 5.

Jhankar Singh, sole proprietor, trading as Viral Nest
KB-126, Ground Floor, Karpuri Puram, Govindpuram, Ghaziabad, Uttar Pradesh 201013, India
GSTIN: 09GNSPS4401Q1ZY
stayclean709@gmail.com · +91 88026 84249