Your personal data: DPDP notice
This is a short notice under India's Digital Personal Data Protection Act, 2023 (DPDP Act). It explains, in plain words, what personal data Jannal handles, why, and what you can do about it. The full detail is in our privacy policy.
If you are a guest
You are seeing this because a home, resort or hotel you are staying with uses Jannal to manage bookings. The property is responsible for your data (it is the “data fiduciary”). Jannal stores and processes it for the property, on its instructions.
What the property collects at online check-in
- Your name, mobile number, email (optional), address (optional) and nationality.
- Your ID type and only the last 4 characters of the ID number — never the whole number.
- Photos of your ID, if you choose to add them (optional; saves time at the desk).
- If you are a foreign national: Form C details — passport, visa, date of birth, where you arrived from, port of arrival, next destination and purpose of visit.
- Your booking, bill, orders and requests made on the guest page.
Why
- Indian law and local police rules require accommodation providers to verify guests' identity and keep a guest register, and to report foreign nationals to the authorities on Form C within 24 hours of arrival. The property files Form C; Jannal only holds the details so it can.
- To check you in faster, run your stay, take orders and requests, and prepare your bill and GST invoice.
Who sees it
The property's staff. Jannal's service providers (such as our database host) store it for us but don't use it for their own purposes. It is shared with the authorities when the law requires (for example, Form C). It is not sold or used for advertising.
How long it is kept
- ID photos: kept in private storage until the property deletes them. The property can delete them at any time; there is no automatic deletion.
- Bills and tax invoices: for as long as GST law requires.
- Other booking records: as long as the property keeps them.
- Your guest page link stops working the day after check-out.
Your rights and how to use them
Contact the property first — at the front desk, by phone or WhatsApp. It can show you your data, correct it, and delete ID photos and anything it does not have to keep by law. If you can't reach the property, or it doesn't respond, write to us at hello@aaroora.com with the property name and your booking dates; we will pass your request on and help the property respond.
If you use Jannal to run a property
For your own account, AAROORA Technologies is the data fiduciary. We collect your mobile number (for sign-in by OTP), name, optional email, your business details (property, GSTIN, UPI ID, rooms and rates), your subscription status, and an audit trail of changes made in the app. We use it to provide Jannal, bill your subscription, support you, keep the service secure and meet tax law. Service providers that help us are listed in the privacy policy. You can delete your account in the app at any time; records of a closed business are kept for 8 years for tax law, then deleted.
Your rights under the DPDP Act
- Access: a summary of your personal data being processed, what is done with it, and who it has been shared with.
- Correction: have inaccurate or incomplete data corrected, completed or updated.
- Erasure: have your data deleted once it is no longer needed for the purpose, unless a law requires it to be kept (for example tax invoices or Form C records).
- Withdraw consent: where we rely on your consent you can withdraw it at any time, as easily as you gave it. Data processed before you withdrew stays lawful. Withdrawing may mean a service can no longer be provided — for example, a property cannot check you in without the ID details the law requires.
- Grievance redressal: complain to our Grievance Officer (below) and get a response.
- Nominate: name a person who can exercise these rights for you if you die or become unable to.
How to make a request
- Owners and staff: most data can be seen and corrected in the app; delete your account from account settings. For anything else, email hello@aaroora.com from your account's email, or tell us your account's mobile number so we can verify you.
- Guests: contact the property first (see above).
- We aim to respond within 30 days. We may ask you to confirm who you are before acting on a request.
Grievance Officer
Ganeshkumar N, Grievance Officer — hello@aaroora.com
AAROORA Technologies (Ganeshkumar N, sole proprietor)
First Floor, 1/716H, Melakkal Main Road East Street, above Federal Bank, Thuvariman, Madurai, Tamil Nadu 625019, India
If you are not satisfied with our response, you can complain to the Data Protection Board of India under the DPDP Act, after first using the grievance process above. The Board works online; the Ministry of Electronics and Information Technology publishes how to file a complaint at meity.gov.in.
Contact
AAROORA Technologies (Ganeshkumar N, sole proprietor), First Floor, 1/716H, Melakkal Main Road East Street, above Federal Bank, Thuvariman, Madurai, Tamil Nadu 625019, India. Email hello@aaroora.com. Grievance Officer: Ganeshkumar N, hello@aaroora.com.