Privacy Policy

This Privacy Policy explains how HostelEase, operated by SatvScript, collects, uses, and protects personal data. We take privacy seriously — especially the sensitive identity data that hostel operations involve.

1. Information We Collect

From hostel owners and staff

• Name, mobile number, and role;
• login credentials (stored only as a secure one-way hash — never in plain text);
• activity logs such as sign-in times and actions taken, for security and audit.

From students and residents (entered by the operator)

• Name, mobile numbers, address, and occupation details;
• identity documents such as Aadhaar number and its scan, and a photograph;
• billing, payment, deposit, and stay records.

When a student registers through a public link, they provide this information directly to the operator of that hostel.

2. How We Use Information

• to provide the Service — managing rooms, residents, billing, and reports;
• to process subscription payments through our payment provider;
• to secure accounts, prevent misuse, and keep an audit trail;
• to provide support and to send essential service notices.

We do not sell personal data, and we do not use student identity documents for any purpose other than providing the Service to the operator who collected them.

3. Roles and Legal Basis

For student and staff records, the hostel operator is the data controller (or Data Fiduciary) and decides how that data is used; HostelEase acts as the processor on their behalf. Operators are responsible for having a lawful basis and appropriate consent for the data they collect, in line with the Digital Personal Data Protection Act, 2023 and other applicable laws.

4. How We Share Information

We share personal data only:

• with the payment provider, strictly to process subscription payments;
• with infrastructure providers that host the Service under confidentiality obligations;
• where required by law, court order, or to protect rights and safety.

5. How We Protect Data

• Uploaded documents (Aadhaar cards, photos, agreements) are stored on private storage, outside the public web, and are served only after an authenticated, permission-checked request — they have no public link.
• Each hostel's data is isolated so one account cannot access another's records.
• Passwords are stored as secure one-way hashes; access is role-based and logged.
• Data is transmitted over encrypted connections (HTTPS).

6. Data Retention

We retain personal data for as long as the account is active and as needed to provide the Service, and thereafter only as required for legal, tax, or audit obligations. Operators can update or delete individual records within the Service. On account closure, data may be deleted after a reasonable export window.

7. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing relies on it. Students and residents should direct such requests to the hostel operator who holds their records; we will assist operators in fulfilling them.

8. Cookies and Contact

We use only essential cookies needed to keep you signed in and to keep the Service secure. We may update this Policy from time to time; material changes will be notified within the Service.

For privacy questions or requests, contact us at no-reply@satvscript.com.