Privacy Policy

1. Introduction

Welcome to Nivaso ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Property Management System (PMS) platform.

By using Nivaso, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

2. What Data We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, hotel name, location
• Google Sign-In: If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account to verify your identity and log you in — we never receive or store your Google password
• Property Details: Hotel information, room counts, pricing, amenities
• Guest Data: Guest names, contact details, booking information (collected on behalf of hotels)
• Payment Information: Processed securely through third-party payment processors (Razorpay, Stripe)
• Communication Data: Messages, support tickets, feedback

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, pages visited
• Cookies: Session cookies, preference cookies, analytics cookies
• Log Data: Access times, error logs, system events

3. How We Use Your Data

We use collected information to:

• Provide and maintain our PMS services
• Process bookings and payments
• Send booking confirmations and updates
• Provide customer support
• Improve our platform and develop new features
• Send marketing communications (with your consent)
• Comply with legal obligations
• Prevent fraud and ensure security

4. Data Sharing

4.1 We Share Data With:

• Third-Party Service Providers: Payment processors, email services, hosting providers
• OTA Partners: Booking.com, Airbnb, Expedia (only booking-related data)
• Legal Requirements: When required by law or to protect our rights

4.2 We Do NOT:

• Sell your personal data to third parties
• Share guest data without hotel authorization
• Use your data for purposes other than stated in this policy

5. Data Security

We implement industry-standard security measures:

• Encryption: SSL/TLS encryption for data in transit
• Access Controls: Role-based access, authentication requirements
• Regular Audits: Security assessments and vulnerability testing
• Data Backups: Regular encrypted backups
• Secure Infrastructure: Cloud hosting with enterprise-grade security

6. Data Retention

• Account Data: Retained while your account is active
• Booking Data: Retained for 7 years for tax and legal compliance
• Guest Data: Retained as per hotel's retention policy
• Marketing Data: Until you unsubscribe or request deletion

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured format
• Opt-Out: Unsubscribe from marketing communications
• Object: Object to certain data processing activities

To exercise these rights, contact us at [email protected]

8. CCPA Notice (California Residents)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you.

Right to Deletion

You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

Do Not Sell My Personal Information

We do not sell personal information. However, we use advertising networks that may collect data for retargeting purposes.

9. GDPR Notice (EU Residents)

We comply with the General Data Protection Regulation (GDPR) for EU residents:

Legal Basis for Processing

• Consent: You have given explicit consent
• Contract: Processing is necessary for contract fulfillment
• Legitimate Interest: For business operations and service improvement

Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

10. Cookie Policy

We use cookies for:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: To understand usage patterns
• Preference Cookies: To remember your settings

You can control cookies through your browser settings.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other legally recognized mechanisms.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Your continued use after changes constitutes acceptance.

13. Contact Us

For privacy-related questions or to exercise your rights: