Privacy Policy

Last updated: June 1, 2025

Nexalaris Tech Pvt. Ltd. (“Nexalaris”, “we”, “us”, or “our”) operates Stayantra, an AI-native Hotel Property Management System (“Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you register for Stayantra, we collect your name, email address, and password. If you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.

1.2 Hotel & Business Data

We collect information you provide about your hotel property, including room configurations, pricing, bookings, staff records, financial data, and guest information necessary to operate the hotel management system.

1.3 Usage Data

We automatically collect certain information when you access the Service, including your IP address, browser type, operating system, pages visited, and timestamps. This data is used for security, analytics, and service improvement.

1.4 Payment Information

Subscription payments are processed through Stripe. For Nepal-based payments (eSewa, Khalti), transaction identifiers are stored. We do not store full payment card numbers on our servers.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Stayantra Service
• Process bookings, payments, and hotel management functions
• Power AI recommendations (Co-Pilot and Auto-Pilot features)
• Send transactional emails (booking confirmations, alerts)
• Improve and develop the Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. Data Sharing & Disclosure

We do not sell your personal data. We share data only in these circumstances:

• Service Providers: Supabase (database hosting), Vercel (infrastructure), Stripe/eSewa/Khalti (payments), Sentry (error monitoring), Google (OAuth, analytics)
• OTA Channels: Room availability and rate data is shared with connected OTA platforms (Booking.com, Agoda) via Channex.io for inventory synchronisation
• Legal Requirements: We may disclose data where required by law or to protect the rights and safety of Nexalaris, our users, or the public
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction

4. Data Storage & Security

Your data is stored on Supabase (PostgreSQL) infrastructure. We implement Row-Level Security (RLS) to ensure strict tenant isolation — each hotel can only access its own data. We use industry-standard encryption for data in transit (TLS) and at rest.

Despite our measures, no method of internet transmission is 100% secure. We encourage you to use a strong password and notify us immediately of any suspected unauthorised access.

5. Data Retention

We retain your account and hotel data for as long as your account is active. Upon account deletion, we delete personal data within 30 days, except where retention is required by law (e.g., financial records, audit logs).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Object to or restrict processing of your data
• Data portability

To exercise these rights, contact us at privacy@nexalaris.com.

7. Cookies

Stayantra uses essential cookies for authentication (session tokens) and user preference storage (theme selection). We do not use advertising or third-party tracking cookies.

8. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice within the Service. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact: