Privacy Policy

Who we are

HOBO Enterprise ("HOBO", "we") is a hotel-management platform operated by Radiant Horizons Hospitality Pvt Ltd, available at hoboenterprise.in. Hotels and hotel chains use it to run their front desk: bookings and stays, guest records, messaging, invoicing, connections to booking channels, and optional marketing tools.

This policy covers three kinds of people: hotel users (the staff who sign in), hotel guests (whose details a hotel keeps on the platform), and visitors to this website. For guest data, the hotel you stayed with decides why and how it is processed; HOBO processes that data on the hotel's behalf and on its instructions.

What we collect

• Account data — name, work email, phone number, role and permissions, sign-in records.
• Hotel operations data — what hotel staff enter or sync to run the hotel: bookings, stays, room and rate details, invoices and receipts, guest profiles (name, contact details, stay history, preferences) and, where a hotel uses check-in features, identity documents the guest provides.
• Messages — conversations a hotel has with its guests through the platform, including WhatsApp messages sent through the hotel's own WhatsApp Business account, and booking emails from mailboxes the hotel connects (below).
• Connected-account data — data received from Google, Microsoft or Meta when a hotel connects those accounts (described in their own sections below). Access tokens are stored encrypted.
• Payment records — amounts, dates and status of payments. Card and UPI details are collected and processed by the payment provider (for example Razorpay) through the hotel's own account; we do not store card numbers.
• Public business information — for hotels that enable the optional Competitive Analysis module we collect publicly available business information about nearby hotels (prices, ratings, review counts, public advertisements) from public web pages and search results. This is information about businesses, not about our users or their guests.
• Technical data — server logs, device and browser information, and the session cookie that keeps you signed in.

Data we receive from Google

A hotel can connect Google services to its HOBO account. Each connection is optional, made by the hotel, and can be disconnected at any time inside the app:

• Gmail (read-only) — if a hotel connects a bookings mailbox, we read booking-related emails (such as OTA booking confirmations) to turn them into bookings on the hotel's dashboard. We do not send email from this access, do not use it for advertising, and our staff do not read these messages except to fix a problem at the hotel's request, with the hotel's permission, or for security reasons.
• Google Business Profile — to show the hotel its own Google reviews and to post the replies the hotel writes.
• Google Ads — to create and manage advertisements in the hotel's own Google Ads account, on the hotel's instruction, and to read their performance back to the hotel.

HOBO Enterprise's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular: Google user data is used only to provide the features above to the hotel that connected the account; it is not sold, not used for advertising unrelated to those features, and not used to train generalised AI or machine-learning models. See the Google API Services User Data Policy.

Data we receive from Meta (Facebook, Instagram, WhatsApp)

• Facebook Page and Instagram — if a hotel connects its Page or Instagram account, we read its reviews and comments and post the replies the hotel writes.
• Meta advertising — to create and manage advertisements in the hotel's own ad account, on the hotel's instruction, and to read their performance.
• WhatsApp Business — guest conversations run through the hotel's own WhatsApp Business account; we process those messages so the hotel can read and answer them.

Our use of Meta data follows the Meta Platform Terms. To have this data deleted, see our Data Deletion page.

AI features

Some features send the specific text or image being worked on to an AI provider and return the result — for example scoring the sentiment of a review, drafting an advertisement, or the WhatsApp guest assistant answering a guest. Depending on configuration the provider is Google (Gemini), Anthropic (Claude) or DeepSeek (used only for the WhatsApp guest assistant; DeepSeek processes data outside India). We send only what the feature needs, and we use these providers under API terms that do not allow our data to be used to train their models.

How we use data

• To provide the platform: run bookings, stays, messaging, invoicing and the other features a hotel uses.
• To act on a hotel's instructions for its connected accounts (reviews, replies, advertisements).
• To keep the service secure: authentication, permissions, audit logs, abuse prevention.
• To support hotels when they ask for help.
• To meet legal obligations, such as keeping tax records.

We do not sell personal data, and we do not use guest data for our own marketing.

Who we share data with

Only service providers that help us run the platform, each limited to its job:

• Hosting and database: Railway (application hosting) and Neon (database).
• File storage: UploadThing (uploaded files and images).
• Email delivery: Resend (transactional email such as notifications and invoices).
• Messaging: Meta's WhatsApp Business Platform, through the hotel's own account.
• Payments: the hotel's own payment provider account (for example Razorpay).
• Channel connectivity: the hotel's channel manager (for example Channex) to sync bookings, rates and availability with booking sites.
• AI providers, as described above, for the specific feature being used.
• Public-web lookup services (SerpApi, Apify) for the Competitive Analysis module — these receive search terms about hotels and public pages to read, never our users' or guests' personal data.

We may also disclose data where the law requires it. If our business changes hands, data may transfer with it under this policy.

Security and retention

Data travels over HTTPS and is stored with access controls; connected-account tokens are stored encrypted; actions inside the platform are audit-logged. We keep data while the hotel's account is active and as long as the law requires (for example invoices for tax). After account closure or a deletion request, data is deleted as described on the Data Deletion page.

Your rights

Under India's Digital Personal Data Protection Act, 2023 (and other laws that may apply to you), you can ask for access to your personal data, correction, or erasure, and you can raise a grievance. Hotel users and website visitors can write to us directly at Akshit@hobostays.in. Hotel guests should contact their hotel first — it controls the booking records — and we help the hotel honour the request; you can also write to us and we will route it.

Cookies: we use only the session cookie needed to keep you signed in — no advertising or cross-site tracking cookies.

The platform is a workplace tool and is not directed at children.

Changes

When this policy changes we update this page and its date; for significant changes we also tell account holders inside the platform or by email.