Privacy Policy — Arinon Hotel Software

Effective date: [to be set] · Version 0.1 (draft) · Governing law: India

This Privacy Policy explains how Arinon Digital, a unit of Manisi (“Arinon”) handles personal data in connection with Arinon Hotel Software (the “Service”). It covers both the personal data of our customers (hotel owners and staff) and the guest data our customers process through the Service. This is the policy for the product; our agency website has a separate policy.

1. Roles under the DPDP Act

For guest personal data entered into the Service, the hotel is the Data Fiduciary (it decides why and how guest data is processed) and Arinon is the Data Processor, processing that data only to provide the Service and on the hotel’s instructions. For account and billing data of our customers, Arinon is the Data Fiduciary.

2. What we collect

• Account data: name, email, phone, hotel details, and login credentials of customer users.
• Billing data: plan, transactions and GST details. Card details are handled by Razorpay, not stored by us.
• Guest data (on the customer’s behalf): guest names, phone numbers, emails, booking, folio and stay details.
• Usage & technical data: log data, device/browser information and basic analytics to run and secure the Service.

3. How we use it

To provide, secure and improve the Service; to process bookings, folios and payments; to send transactional messages (including WhatsApp confirmations) on the hotel’s behalf; to provide owner reporting and marketing features; and to meet legal and tax obligations. We do not sell personal data.

4. Sub-processors

We use trusted service providers to run the Service. Current sub-processors include:

• Vercel — application hosting and compute.
• Neon — database hosting (bookings, folio and guest data).
• Razorpay — payment processing.
• Gupshup — WhatsApp messaging and one-time passwords.
• Anthropic (via Vercel AI Gateway) — owner-side AI marketing features.

[To confirm before publishing: the hosting region of guest data and any cross-border transfer disclosure.]

5. Data retention & deletion

We retain personal data for as long as your account is active and as needed to provide the Service and meet legal/tax obligations. On termination, you may export your data for a reasonable period, after which it is deleted or anonymised.

6. Security

We use reasonable technical and organisational measures — including access controls, encryption in transit, and tenant isolation — to protect personal data. No system is perfectly secure; we maintain an incident-response process and will notify affected parties of a personal-data breach as required by law.

7. Your rights (Data Principals)

Subject to law, individuals may request access to, correction of, or erasure of their personal data, and may withdraw consent. Guests should contact the hotel (the Data Fiduciary) in the first instance; we will assist our customers in responding to such requests.

8. Grievance Officer

For privacy questions or complaints, contact our Grievance Officer at info@arinon.com. We aim to acknowledge and address grievances within the timelines required under applicable law.

9. Changes

We may update this Policy; material changes will be notified and take effect from the stated effective date.

Questions? Contact info@arinon.com · +91 92204 40702 · Dwarka, Sector-19, New Delhi 110075, India.