Account data is about the people who use Rooms24: names, email addresses, phone numbers, sign-in records and permissions. We are the controller of this.

Property data is what a hotel records while running its business, including guest details and reservations. The hotel is the controller of that; we process it on their instructions.

Name, email address and phone number when an account is created. Documents submitted to verify a property. Payment records from Stripe, eSewa, Khalti or Fonepay, though never full card numbers, which we do not receive.

Technical records needed to run and secure the service: sign-in attempts, session activity, network address, and an audit entry for actions taken inside a property.

To provide the service, to bill for it, to verify that a property is what it claims to be, and to detect and investigate abuse. Security and audit records exist because a system holding guest data should be able to answer who did what.

Each property's business data is held in its own database. Account identities are held in a separate platform database shared across the service. That separation is deliberate, so one property's operational data is never mixed with another's.

Audit and security records are kept for a retention window set by your plan. Extending the window keeps more. Shortening it applies only to records created afterwards, never to history already collected.

Business data is kept while your account is open. After closure we retain what the law requires and delete the rest.

Our payment providers, for the transactions they process. Our hosting provider, which stores the databases. Nobody else. We do not sell data to anyone.

You may ask for a copy of your data, ask us to correct it, or ask us to delete it where we are not required to keep it. Where a hotel is the controller, guest records for example, we will pass the request to them and support them in answering it.

We set a session cookie so you stay signed in, and a device cookie used to rate-limit abuse. We do not run advertising trackers on this site.