This policy explains what personal data StayFlint collects, why, who it is shared with, and the choices you have. StayFlint is provided by ByteFlow Technologies Private Limited ("ByteFlow", "we", "us"). We handle personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Two kinds of data, two roles

Data about you, when you deal with us — website visitors, hotel owners who ask for a quote, and subscribers. We decide how this data is used, and this policy applies to it in full.
Data about your guests, inside your account — the reservations and guest records a hotel enters. The hotel decides what to collect and why; we store and process it only on the hotel's instructions, to provide the service. A guest with a question about their data should contact the hotel first, and we will help the hotel respond.

What we collect

When you ask for a quote or contact us: your name, hotel name, city, number of rooms and WhatsApp number, plus your email address and message if you add them.
When you subscribe: billing details, the account owner's contact details, and the names and phone numbers or email addresses of staff you create logins for.
When you use StayFlint: the hotel's records — reservations, bills, payments, stock and accounts — and a log of which login did what.
Guest records your hotel enters: such as names, contact details, stay details and identity documents recorded at check-in.
Payments: processed by Razorpay. We receive a payment reference and its status, never your card, UPI or net-banking credentials.

What this website does not do

The stayflint.com website sets no advertising or analytics cookies and runs no third-party tracking scripts. If that ever changes, this page will be updated before it does.

Why we use it

to reply to your enquiry and send you a quote;
to set up, run, support and bill your subscription;
to keep the service secure and investigate misuse;
to meet our legal, tax and accounting obligations.

We do not sell personal data, and we never use guest records entered by a hotel for our own marketing.

Who we share it with

Only with service providers that help us run StayFlint, and only what each one needs:

Amazon Web Services — hosting, in the Mumbai region in India.
Razorpay — payment processing.
Email and network providers — to deliver emails and to deliver and protect the website.
Meta (WhatsApp Business) — only if your hotel turns on WhatsApp messaging.
AI model providers (Anthropic and Google) — only on the AI plan, and only the text needed to answer a request. These requests may be processed outside India.

We may also disclose data where the law requires it, for example in response to a valid order of a court or another competent authority.

Where it is stored and how it is protected

StayFlint runs on servers hosted by Amazon Web Services in the Mumbai region, in India.
Data travels over encrypted HTTPS connections, and the server disks are encrypted.
Identity document numbers recorded by a hotel are additionally encrypted inside the database.
Each staff login sees only what its role allows, and every hotel's data is kept separate from every other hotel's.
No system is perfectly secure. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

How long we keep it

Enquiries that do not become a subscription: up to 24 months, or sooner if you ask us to delete them.
Account and hotel data: for as long as the subscription lasts, plus 30 days so you can export it, then deleted.
Invoices and payment records: for as long as tax and company law require, currently up to 8 years.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

ask what personal data we hold about you and how it is used;
ask us to correct, complete or update it;
ask us to delete it, where the law does not require us to keep it;
withdraw consent you gave us, for example to receive messages from us;
nominate someone to exercise these rights on your behalf;
raise a grievance with us and, if you are not satisfied, with the Data Protection Board of India.

For guest records held in a hotel's account, the hotel answers the request and we help it do so.

Grievance Officer

Our Grievance Officer is Priyanka Shivhare, Director. Write to her at info@byteflowtech.in with the subject line "Grievance", or by post to L1-114, Mahashakti Nagar, Dewas Road, Ujjain Vikram University, Ujjain – 456010, Madhya Pradesh, India. We acknowledge within 2 working days and resolve within 30 days.

Children

StayFlint is a business tool and is not directed at children. A hotel may record a child's details as part of a family's stay; those details are guest records, handled on the hotel's instructions.

Changes to this policy

The date at the top of this page shows when this policy last changed. Subscribers are told about material changes by email or WhatsApp before they take effect.

Contact

Questions about privacy: info@byteflowtech.in or +91 95847 40544. More ways to reach us are on the contact page.

Privacy Policy