Privacy Policy

We process information entered by hotel staff or collected through guest-facing services: guest names, contact details, reservation records, identity documents (Passport / Aadhaar), payment and invoice data, and operational logs. We do not collect this data directly from guests ourselves — our hotel customers are the data controllers for guest information.

Information is used to operate the PMS: manage reservations, check-ins, billing, POS orders, reports, and communications. We do not sell guest data or use it to train external AI models. Aggregated, anonymised analytics may be used to improve the platform.

Data is stored in encrypted databases and object storage. Identity documents are kept in private storage buckets and accessed via short-lived signed URLs. Network traffic is protected with TLS 1.2 or higher. Access is enforced by role-based permissions and database Row-Level Security.

We share data only with subprocessors necessary to provide the service (cloud hosting, payment processors, email/SMS delivery). All subprocessors are bound by confidentiality and data-protection obligations. We do not share guest data with advertisers.

Customer data is retained while the account is active and for a reasonable period afterwards to meet legal, tax, and audit obligations. Document scans can be deleted by authorised staff in accordance with the hotel’s own retention policy.

Hotel administrators can access, correct, export, and delete data within the platform. Guests should contact the hotel directly for privacy requests concerning their personal data. For platform-level questions, email sales@maghraut.com.

We may update this Privacy Policy as the platform evolves. We will notify customers of material changes via email or in-app notice. Continued use after changes constitutes acceptance.