Privacy Policy

1. Information we collect

Account & sign-in information

You can sign in with Google or with your phone number. Depending on the method you choose, we collect:

• Sign in with Google: your name, email address and profile picture, as provided by Google. We only request basic profile and email information.
• Sign in with phone: your mobile phone number, which is verified with a one-time password (OTP) sent by SMS.

Reviews

When you write a review of a temple or hotel, we collect the display name shown on the review, your star rating and your review text. Your review, including the display name, is shown publicly on the temple or hotel page. Please do not include information in a review that you do not want to be public.

Hotel bookings & payments

If you book a hotel through Devalayam, we collect the guest name, and where you provide them, the guest email address and phone number, along with your stay dates and the number of rooms and guests. Payments are processed by our payment provider, Razorpay. We do not store your card, UPI or bank details — those are handled directly by Razorpay. We retain the payment reference identifiers (such as the Razorpay order, payment and refund IDs), the payment status and the booking amounts.

Hotel owner information

If you list a hotel — through our website or the Devalayam Owner mobile app — we collect your owner email address, a contact phone number and the business details of the property (name, address, pricing, room types, images and amenities). With your permission, the Owner app also uses your device’s location once to help you set your property’s map pin — we do not track your location at any other time or in the background.

To pay out your share of guest bookings, we also collect your bank account details (account number and IFSC code) and/or UPI ID. These are used only to send you payouts and are never shown to guests or made public.

Usage & device information

We use Google Analytics to understand how visitors use the site. This automatically collects usage and device information such as pages visited, approximate location, browser and device type, and similar diagnostic data, using cookies and similar technologies.

2. How we use your information

• To create and secure your account and keep you signed in.
• To publish the reviews you choose to submit, shown alongside your display name.
• To process, confirm and manage your hotel bookings and any refunds.
• To communicate with you about your bookings or reviews.
• To operate, maintain, analyse and improve the platform.
• To detect, prevent and address fraud, abuse and security issues.
• To comply with our legal obligations.

3. Who we share your information with

We do not sell your personal data. We share it only with service providers who process it on our behalf so that Devalayam can function:

• Supabase — our database, authentication and file-storage provider, which hosts your account, reviews and booking records.
• Google — for “Sign in with Google” authentication and for Google Analytics.
• Razorpay — our payment processor, for hotel booking payments and refunds, and, where a hotel owner’s payout is sent electronically, their bank or UPI details as needed to complete that transfer.
• SMS provider — used to deliver one-time passwords for phone sign-in.
• Hotel owners — when you make a booking, the details necessary to honour that booking (such as guest name, contact details, dates and guest count) are made available to the relevant hotel.
• Our own staff — a hotel owner’s bank/UPI details may be seen by authorised Devalayam staff processing payouts sent by manual bank transfer.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety and property of Devalayam, our users or the public.

4. Public information

Reviews you submit — including the display name, star rating and review text — are public and may be viewed by anyone and indexed by search engines. You can ask us to remove a review you have posted by contacting us.

5. Cookies

We use cookies and similar technologies for two purposes: essential cookies that keep you signed in and maintain your session, and analytics cookies (via Google Analytics) that help us understand site usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

6. Data retention

We keep your account information for as long as your account is active. Reviews remain published until you or we remove them. Booking and payment records are retained as needed to provide the service and to meet legal, accounting and tax obligations. When you delete your account, personal identifiers linked to your account are removed or de-associated in accordance with our systems and applicable law.

7. Your rights & choices

Depending on your location, you may have the right to access, correct, update or delete your personal data, or to object to or restrict certain processing. To exercise these rights, or to request deletion of your account or a review, contact us at support@devalayam.app.

8. Data security

We rely on reputable providers (Supabase, Razorpay, Google) that implement industry-standard security measures, and we take reasonable steps to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s privacy

Devalayam is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will take appropriate steps to remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of Devalayam after changes take effect constitutes acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@devalayam.app.

See also our Terms of Service.