Privacy Policy

Last updated: 28 July 2026

This Privacy Policy explains how OurGuests ("OurGuests", "we", "us", or "our"), a sole proprietorship operated by Sachin Agarwal with its principal place of business at 70, Shivram Colony, Jagatpura, Jaipur, Rajasthan, operates the OurGuests platform (the "Platform") and handles your personal data. We are the Data Fiduciary in respect of the personal data we process, and we are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000 and the rules made thereunder, including the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By creating an account or using the Platform, you agree to this Privacy Policy.

1. Information We Collect

We collect only the data needed to provide the Platform:

  • Account data: your name, email address, phone number and password (stored only in encrypted/hashed form).
  • Property & tenancy data: property and unit details, tenancy records, rent, deposit, electricity and maintenance information you enter.
  • Financial records: payments recorded against a lease, adjustments and settlement details. We do not store card numbers or bank credentials; online payments, when enabled, are processed by a third-party payment gateway.
  • Identity documents: a copy of one government ID of your choosing (passport, driving licence, voter ID, or a masked Aadhaar), uploaded by a tenant so the landlord of that tenancy can verify who they are. We accept only the masked form of Aadhaar and never ask for an Aadhaar number, and we do not use Aadhaar for authentication or e-KYC.
  • Documents & media: other files you upload, such as lease documents, property photos/videos and maintenance images.
  • Consent records: when you consent to something, we record what you agreed to, the version of this policy in force, and the date and time, so that both of us can later establish what was agreed.
  • Technical & usage data: IP address, device and browser information, and log data collected automatically when you use the Platform.

2. How We Use Your Information

We process your personal data to: create and manage your account; connect landlords and tenants and operate tenancies; record and display rent, electricity and maintenance activity; send in-app notifications and service communications; process subscriptions; provide support; ensure security and prevent fraud; and comply with applicable law.

3. Legal Basis and Consent

We process personal data on the basis of your consent and for the "legitimate uses" permitted under the DPDP Act (for example, where you have voluntarily provided data for a specified purpose). Where we rely on consent, it is free, specific, informed and unambiguous, and you may withdraw it at any time by contacting our Grievance Officer (see Section 10). Withdrawing consent does not affect processing carried out before the withdrawal.

4. Sharing and Disclosure

We do not sell your personal data. We share it only: (a) between the landlord and tenant(s) of a tenancy, to the extent necessary to operate that tenancy (for example, a landlord can see the contact details of their tenant); (b) with Data Processors and service providers (such as hosting and, where enabled, payment gateways) acting on our instructions under contract; and (c) where required by law, court order, or a lawful request from a government authority.

5. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Platform, resolve disputes, and comply with legal, accounting and tax obligations. When data is no longer required, we will erase it or anonymise it, unless retention is required by law.

Identity documents are subject to a specific, automatic limit: an ID document uploaded for a tenancy is deleted automatically 90 days after that tenancy ends. The 90 days exist so that a deposit or damage dispute arising after move-out can still be resolved. Deletion is carried out by an automated daily process, not on request, and it removes both the record and the stored file.

6. Data Security

We implement reasonable security practices and procedures as required under the SPDI Rules, 2011 and the DPDP Act, including password hashing, access controls, authenticated file access and encryption in transit. No method of transmission or storage is completely secure; in the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by law.

7. Your Rights as a Data Principal

Subject to the DPDP Act, you have the right to: access a summary of your personal data and how it is processed; seek correction, completion, updating or erasure of your personal data; nominate another individual to exercise your rights in the event of death or incapacity; readily grieve; and withdraw consent. You can exercise these rights through your profile settings or by contacting our Grievance Officer.

Two of these are built directly into the Platform and need no request to us:

  • Download your data: your profile page offers a complete machine-readable export of the personal data we hold about you, including your consent history.
  • Withdraw ID consent: your profile page also lets you withdraw your consent to us holding your identity document. Doing so deletes that document immediately. If you have an active tenancy, you will be asked to provide an ID again in order to continue using it.

8. Cookies and Tracking

We use strictly necessary cookies and similar technologies (such as a session cookie) to keep you signed in and operate the Platform. We do not use them for third-party advertising.

9. Children's Data

The Platform is not intended for individuals under 18 years of age. We do not knowingly process the personal data of children without verifiable consent of a parent or lawful guardian as required by the DPDP Act.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, the contact details of our Grievance Officer are:

Name: Sachin Agarwal
Email: support.ourguests@gmail.com
Phone: +91 99826 44919
Address: 70, Shivram Colony, Jagatpura, Jaipur, Rajasthan

We will acknowledge a grievance within 24 hours and resolve it within 15 days of receipt.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform. Your continued use after an update constitutes acceptance of the revised policy.

12. Governing Law

This Privacy Policy is governed by the laws of India, and any disputes are subject to the exclusive jurisdiction of the courts at Jaipur, India.