TheNammaPrivacy Policy
This policy explains how TheNammaStay (operated by Namma Groups, Chennai, India) handles personal data, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Two kinds of data, two roles
| Whose data | Examples | Our role |
|---|---|---|
| Customers — property owners and their staff | Name, email, phone, property details, billing details and GSTIN, sign-in records | We are the data fiduciary: we decide how this data is used, as described here. |
| Guests of properties using TheNammaStay | Name, phone, email, nationality, date of birth, ID number and ID photos, passport/visa details for Form C, stay and payment records | The property is the data fiduciary; we are its data processor and only use this data to provide TheNammaStay to that property. |
| Visitors and enquiries on our website | Name, phone, email, city, message from the early-access form | We are the data fiduciary. |
Guests: for questions about your data, please contact the property you stayed at first. We will help the property answer you.
2. Why we use customer and website data
- To create and run your account, sign you in securely, and provide support.
- To bill you, issue GST invoices and send reminders about your trial or renewal.
- To keep TheNammaStay secure, prevent misuse and fix problems.
- To reply to enquiries from our website.
- If you choose to link WhatsApp to Purni, to verify your account link and answer your read-only property questions.
We do not sell personal data, and we do not use guests’ data for our own marketing.
3. Where data is stored and who helps us
- Data is stored with Supabase in its Mumbai, India region, encrypted in transit and at rest, with daily backups.
- Service providers we use only as needed: Supabase (database & hosting of data), GitHub Pages (website hosting), Resend (emails), Razorpay (payment links — in the property’s own account), Meta / WhatsApp (Purni chats only when you link your number), Google Fonts (website fonts). Meta processes the messages and replies under its own terms.
- Some providers may process limited data outside India under appropriate safeguards, as permitted by the DPDP Act and Government notifications.
4. How long we keep data
- Guest ID photos are deleted automatically after the number of days each property sets (by default some time after check-out).
- Properties can edit or delete guest records at any time.
- Customer account data is kept while the account is active and deleted or anonymised within 90 days after it is closed, except tax invoices and records we must keep by law.
- A linked WhatsApp number is kept until you disconnect it or close your account. WhatsApp message IDs used to prevent duplicate replies are kept for up to 30 days; message text is not retained by NammaStay.
- Website enquiries are kept up to 2 years unless you ask us to delete them sooner.
5. Security
Each property can only see its own data (enforced in the database). Staff access follows roles the owner controls; TheNammaStay admins use two-step sign-in; ID photos are stored privately and shown only to the property’s staff; payment card details are never stored by NammaStay.
6. Your rights
Under the DPDP Act you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to act for you. Write to thenammastay@gmail.com with the subject “Data request”. We reply within 30 days. Guests should contact the property first (see section 1).
7. Grievance officer
Email: thenammastay@gmail.com · Phone: +91 80985 66636
If you are not satisfied with our reply, you may approach the Data Protection Board of India.
8. Cookies and similar storage
We use your browser’s storage only for things needed to run TheNammaStay (keeping you signed in, your language). We do not use advertising trackers.
9. Changes
We will post changes here and, for important changes, tell customers by email or in the app.
TheNammaStay (operated by Namma Groups), Chennai, Tamil Nadu, India
Email: thenammastay@gmail.com · WhatsApp / phone: +91 80985 66636