1. Introduction
Webracha (“we,” “us,” or “our”) is a product of Shirisha Digital, a company based in India. We operate the Webracha platform, which provides property website hosting, booking management, and payment processing services for hospitality businesses.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services — whether you are a property host (“Host”) using our management platform or a guest (“Guest”) making a booking through a property website powered by Webracha.
By using our services, you agree to the collection and use of information in accordance with this policy. If you have questions, contact us at shirishadigital29@gmail.com.
2. Information We Collect
2.1 Information you provide directly
- Account & Identity: Name, email address, phone number when you register as a Host or submit an interest form.
- Property Information: Property name, description, photos, videos, location, room types, pricing, amenities, and policies — all entered by Hosts via the dashboard.
- Booking Data: Guest names, email addresses, phone numbers, check-in/check-out dates, number of guests, special requests, and booking status.
- Payment Information: We do not store card numbers. Payment transactions are processed by Cashfree Payments. We receive booking confirmation and transaction reference numbers.
- Messages: Communications exchanged between Hosts and Guests through our in-platform messaging system.
2.2 Information collected automatically
- Usage Data: Pages visited, features used, session duration, and actions taken on our platform, collected through server logs.
- Device & Browser Info: Browser type, operating system, device type, and IP address.
- Push Notification Tokens: If you opt in to browser push notifications, we store a device-specific push subscription token to deliver notifications.
3. How We Use Your Information
- Service Delivery: To provide and operate the Webracha platform — creating property websites, processing bookings, managing availability, and facilitating payments.
- Communications: To send booking confirmation emails, check-in reminders, booking status updates, and platform notifications via email (ZeptoMail) and browser push notifications.
- Account Management: To authenticate and manage Host accounts using WorkOS.
- Customer Support: To communicate with you about your account, answer queries, and resolve issues.
- Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve our services.
- Legal & Security: To comply with applicable laws, prevent fraud, and protect the security of our platform and users.
4. Data Sharing & Third Parties
We do not sell your personal data. We share data only with the following service providers, strictly for the purpose of operating our platform:
- Cashfree Payments: Our payment gateway. Guest payment details are transmitted directly to Cashfree and processed under their PCI-DSS compliant infrastructure. We receive only transaction confirmation data.
- ZeptoMail (by Zoho): Our transactional email provider. We transmit recipient email addresses, names, and booking details to send booking-related emails. ZeptoMail's privacy policy applies to their handling of this data.
- WorkOS: Our authentication provider, used for Host account sign-in and session management.
- Convex: Our backend database infrastructure, hosted on secure cloud servers. All property, booking, and user data is stored within Convex.
We may also disclose your information if required by law, regulation, court order, or government authority.
5. Cookies & Tracking
We use session cookies strictly necessary for authentication and platform functionality (e.g., keeping you logged in as a Host). We do not use third-party advertising cookies or behavioural tracking.
Our server logs may capture IP addresses and request metadata for security monitoring and error diagnosis. These logs are retained for up to 30 days.
6. Data Retention
- Active Accounts: We retain your data for as long as your account is active and the subscription is paid.
- Booking Records: Booking data is retained for 3 years following the booking date to support dispute resolution and legal compliance.
- Deleted Accounts: Upon account deletion or subscription cancellation, we will delete personal data within 60 days, except where retention is required by law.
- Marketing Submissions: Interest form submissions (from our landing page) are retained until you request deletion.
7. Your Rights
As a data subject, you have the following rights under applicable privacy laws (including India's Digital Personal Data Protection Act, 2023):
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data (subject to legal retention obligations).
- Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis.
- Grievance: Lodge a grievance with our designated contact below.
To exercise any of these rights, email shirishadigital29@gmail.com with the subject line “Privacy Request.” We will respond within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), secure access management, and access controls.
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Children's Privacy
Our platform is not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our platform. Continued use of the service after updates constitutes acceptance of the revised policy.
11. Contact Us
For questions, concerns, or requests regarding this Privacy Policy, contact us at:
Shirisha Digital (Webracha)
Email: shirishadigital29@gmail.com
Jurisdiction: India