Privacy Policy

1. Introduction

Bunks ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website and its subdomains, including but not limited to:

• bunks.app (Official Website)
• owner.bunks.app (Property Management Dashboard)
• itineraries.bunks.app (AI Travel Planner)
• go.bunks.app (URL Shortener & Communications)

Data Protection Roles

For guest-related personal data processed during check-in, partner properties act as the Data Fiduciary and Bunks acts as a Data Processor under the Digital Personal Data Protection Act, 2023. For personal data collected directly by Bunks for account creation, billing, communications, and compliance, Bunks acts as the Data Fiduciary.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Identity Data: Name and limited identity attributes derived from government-issued documents (such as Passport, Driving License, or UIDAI-specified offline Aadhaar verification), processed solely for identity verification purposes. We do not collect or store Aadhaar numbers.
• Contact Data: Phone number, email address, and mailing address.
• Booking Data: Check-in and check-out dates, property preferences, and stay history.
• Photographic Data: Optional facial photograph provided by the user for visual verification by the property. This data is not used for biometric identification, facial recognition, or automated matching.

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as:

• Device Data: IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.
• Location Data: We may collect geolocation data only with your explicit permission to provide location-based services (e.g., finding nearby properties, verifying check-in location).

2A. Aadhaar Data Handling (Offline Verification Only)

• Bunks does not collect, store, or process Aadhaar numbers, biometric data, or Aadhaar authentication logs.
• Aadhaar-related verification, where used, is limited to UIDAI-specified Offline Aadhaar Verification using QR code or XML-based cryptographic signature validation performed locally on the user's device with explicit consent.
• Bunks does not access UIDAI servers and does not perform Aadhaar authentication or e-KYC.
• Only a masked verification reference ID and minimal identity attributes (partially masked name, date of birth) are retained after verification.
• Aadhaar is not mandatory to use the Services unless required by applicable law. Users may choose alternative identity documents for verification.

For detailed information about our Aadhaar handling practices, please see our Aadhaar Privacy & Compliance Policy.

3. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

• To facilitate account creation and logon process: We use the information you provide to create and manage your Bunks Passport.
• To verify your identity: Essential for maintaining security and trust within the Bunks network. This includes validating identity details provided by the user using UIDAI-specified offline Aadhaar verification or alternative government-issued identity documents.
• To facilitate check-ins: Streamlining the check-in process at partner properties by sharing necessary verification status.
• To send administrative information to you: We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies.
• To protect our Services: We may use your information as part of our efforts to keep our Services safe and secure (for example, for fraud monitoring and prevention).
• To enforce our terms, conditions and policies: For business purposes, to comply with legal and regulatory requirements or in connection with our contract.
• Aggregated Data Usage: You acknowledge and agree that Bunks may use your data in an anonymized and aggregated form for internal business purposes, analytics, and to improve our services, and such rights shall survive the termination of your account.

4. Communications

By using our Services and providing your contact information, you authorize Bunks to send you notifications, updates, and communications through various channels. We use multiple communication channels to ensure you receive important information about your stays, account, and services.

Communication Channels We Use

• RCS (Rich Communication Services): Our primary communication channel. RCS provides rich messaging features including read receipts, typing indicators, high-quality media sharing, and interactive messages for an enhanced experience.
• SMS (Short Message Service): Used as a fallback when RCS is unavailable on your device, for OTP verification, and critical alerts.
• Email: Used for booking confirmations, receipts, account-related communications, promotional offers, and newsletters (if subscribed).
• Push Notifications: In-app notifications about your bookings, check-ins, and personalized updates.
• Other Channels: We may use other communication methods including WhatsApp, in-app messaging, or other emerging platforms to provide you with timely and relevant information.

You may opt out of promotional communications at any time, but transactional messages related to your bookings and account security will continue to be sent.

5. Sharing Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

• Partner Properties: When you use Bunks to check in at a property, we share your verification status and minimal necessary identity attributes with that specific property solely to facilitate your stay and comply with local regulations.
• Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work (e.g., identity verification services, cloud hosting, SMS providers).
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

6. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

7. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

8. Your Privacy Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal information:

• Right to Access: Request a summary of your personal data and how it is being processed.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Grievance Redressal: Lodge complaints regarding processing of your personal data.
• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

These rights are provided in accordance with the Digital Personal Data Protection Act, 2023, subject to applicable legal limitations. To exercise any of these rights, please contact us using the contact details provided below.

9. Contact Us

If you have questions or comments about this policy, you may email us at hello@bunks.app, call us at +91 78892 45747, or by post to: