Privacy Policy

1. Introduction and Commitment to Data Privacy

HostSynk Technologies Inc. ("HostSynk", "we", "us", or "our") respects the privacy rights of property owners, hospitality managers, staff, and guests. This Privacy Policy details our policies regarding the collection, storage, encryption, and disclosure of personal information when using our software-as-a-service (SaaS) platform, direct booking engines, API connectors, and cloud hosting infrastructure.

2. Information We Collect

When you register for a HostSynk account or your guests utilize the direct booking engine, we collect the following categories of data:

• Account & Property Information: Name, business email, contact number, property names, tax identifiers (GST/VAT), room inventories, and banking settlement details.
• Guest Reservation Data: Primary guest names, telephone numbers (for WhatsApp delivery), email addresses, arrival/departure dates, number of occupants, and special accommodation requests.
• Payment & Transaction Tokens: Payment processing is handled via PCI-DSS compliant gateways (Razorpay, Stripe). HostSynk does not store unencrypted credit card numbers or banking PINs on its servers.
• Technical Device & Usage Logs: IP address, browser type, edge server response times, and access timestamps utilized strictly for site security and performance diagnostics.

3. Data Ownership & The Host-Guest Relationship

Unlike third-party Online Travel Agencies (OTAs), you own your guest data 100%. HostSynk operates purely as a Data Processor on behalf of the host (the Data Controller). We will never sell, lease, monetize, or market to your guests' contact records.

4. Data Security and Cloud Encryption Standards

All data transmitted across HostSynk systems is protected using industry-standard TLS 1.3 encryption with 256-bit keys. Database stores utilize AES-256 encryption-at-rest. System access is restricted via multi-factor authentication (MFA) and isolated containerization on dedicated NVMe SSD cloud hardware.

5. WhatsApp & Third-Party Channel Synchronization

To deliver automated check-in vouchers, caretaker notifications, and OTA lockout updates, HostSynk communicates with authorized third-party APIs (including Meta WhatsApp Business Cloud API, Airbnb, and Booking.com). Data shared with these endpoints is strictly limited to information necessary to fulfill calendar syncing and guest dispatch functions.

6. Your Rights & Data Deletion Requests

Under applicable data privacy frameworks (including the Digital Personal Data Protection Act and GDPR), you have the right to request access to, rectification of, or complete deletion of your account and property records. To submit a data deletion request, email our compliance team at privacy@hostsynk.com.