Privacy Policy

1. Introduction

This Privacy Policy is published by Resortree Technologies LLP (“Resortree”, “we”, “our”, or “us”), the operator of the website https://resortree.com, the Resortree Property Management System, related booking widgets, and guest-facing payment flows (together, the “Service”).

It explains how we collect, use, disclose, store, and safeguard personal information, including when you pay online. Online payments on the Service are processed by Razorpay Software Private Limited (“Razorpay”), a Reserve Bank of India authorised payment aggregator. Razorpay’s own practices are described in the Razorpay Privacy Policy and Razorpay Terms of Use.

By using the Service, you acknowledge the practices described here. If you do not agree, please do not use the Service. See also our Terms and Conditions, Cancellation and Refunds Policy, and Data Deletion Instructions.

2. Who We Are & Roles

Legal entity: Resortree Technologies LLP, Salarpuria Magnificia, Bengaluru, Karnataka, India. Email: privacy@resortree.com.

• Hotel staff / administrators use Resortree accounts to operate their property.
• Guests interact with a hotel (bookings, stays, messages). Guests are not Resortree account holders unless they separately create an account with us.
• For guest and operational data entered or received on behalf of a hotel, the hotel is typically the data controller. Resortree acts as a service provider / data processor.
• For our own accounts, billing, website visitors, and product analytics, Resortree is the controller.
• For online payments, Razorpay processes payment credentials as a payment aggregator. We do not receive or store full card numbers, CVV, UPI PINs, or internet-banking passwords.

3. Information We Collect

3.1 Account & staff information

Name, email address, role/permissions, and related profile details. Authentication is handled through Google Firebase Authentication.

3.2 Property & operational data

Property configuration, room inventory, rates, reservations, folios, payments metadata, housekeeping status, and similar hospitality records.

3.3 Guest data (hotel-managed)

Names, phone numbers, email addresses, identification documents or references, stay details, preferences, and billing-related information provided by the hotel or the guest.

3.4 Payment information (Razorpay)

When you make or receive a payment through the Service, we and/or Razorpay may process:

• Payer name, email address, and phone number (to create the checkout order, send receipts, and prevent fraud)
• Transaction amount, currency, order/booking reference, and description of the goods or services
• Payment status, Razorpay order id, payment id, refund id, method type (for example UPI, card, netbanking, wallet), and bank/UPI reference where Razorpay returns it
• Limited card metadata such as last four digits and issuing network, if Razorpay provides them — never the full PAN, CVV, or PIN

Card and UPI credentials are entered on Razorpay’s PCI DSS certified checkout (or the customer’s bank/UPI app). Resortree does not store those credentials on our servers. You may also review Razorpay’s Privacy Policy.

3.5 Guest email and WhatsApp

Hotels may send operational email and, if connected, WhatsApp Business messages. We process addresses, message content, and delivery metadata solely for that hotel’s guest-service purposes.

3.6 Usage & technical data

Browser type, approximate access times, pages viewed, IP address, and diagnostic logs, used to secure, operate, and improve the Service.

4. How We Use Information

• Provide, operate, maintain, and improve the Service
• Authenticate users and enforce access controls
• Process reservations, check-in/out, billing, housekeeping, and related operations
• Initiate, confirm, reconcile, refund, and dispute online payments through Razorpay
• Send booking confirmations, invoices, and payment receipts
• Detect, prevent, and address fraud, security incidents, and abuse
• Comply with law (including RBI payment-aggregator requirements, GST, and DPDP) and enforce our terms

We do not sell personal information. We do not use guest payment or contact details to build advertising profiles for Resortree’s own marketing.

5. Data Sharing & Third Parties

We do not sell, trade, or rent personal information. We share data only as needed to run the Service or as required by law:

• Razorpay: name, contact details, amount, and order references required to collect or refund a payment. Razorpay may share transaction data with acquiring banks, card networks, UPI/NPCI, wallets, and regulators as required to complete the payment. See razorpay.com/privacy.
• Within the hotel: authorised staff for that property.
• Meta / WhatsApp and hotel email providers: when those channels are connected by the hotel.
• Infrastructure: Google Cloud / Firebase and Google Cloud Run, as subprocessors.
• Legal & safety: when required by law, regulation, legal process, or to protect rights and safety.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

6. Data Storage & Security

Data is stored on Google Cloud / Firebase with encryption in transit (TLS) and at rest as provided by those platforms. Payment credentials are handled by Razorpay under PCI DSS. Access inside Resortree is controlled by authentication and role-based permissions. No method of transmission or storage is 100% secure.

7. Data Retention

• Staff accounts: while active and as needed afterward for audit, security, or legal reasons.
• Guest, reservation, and payment records: as required for hotel operations, GST/tax, RBI, chargeback, and accounting retention.
• WhatsApp messages & media: typically up to 365 days, then deleted by automated cleanup.

Deletion requests are described on our Data Deletion Instructions page.

8. Your Rights & Choices

Depending on your location and role, you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability, including under India’s Digital Personal Data Protection Act, 2023.

• Hotel staff: contact your property administrator, or email privacy@resortree.com.
• Guests: contact the hotel you booked or stayed with first. We will assist hotels in responding to valid requests for data we process on their behalf.
• Payment data held by Razorpay: you may also use Razorpay’s grievance channels described in their privacy policy.

9. Cookies & Local Storage

The Service uses cookies, browser local storage, and similar technologies that are essential for session, authentication, and security. Our marketing website may use additional cookies as disclosed there. You can control cookies in your browser; disabling them may prevent login or checkout from working.

10. Children’s Privacy

The Service is designed for hospitality businesses and adult staff. It is not directed at children under 18. We do not knowingly collect personal information from children for Resortree accounts. Hotels are responsible for guest data involving minors under applicable law.

11. International Processing

We and our infrastructure providers may process data in countries where Google Cloud / Firebase and our services operate. Razorpay processes payments primarily for use in India. Where required, we rely on appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Continued use after changes means you accept the updated policy.

13. Grievance Officer & Contact

For privacy questions, data requests, or grievances under this policy:

Related pages: Terms and Conditions · Cancellation and Refunds · Contact Us · Data Deletion