Privacy policy

Who we are

atithiai is an AI receptionist for hotels, built and run by Intgrax Tech Studios, a Udyam-registered MSME in Jaipur, Rajasthan, India (“atithiai”, “we”, “us”). This policy explains what personal data we collect, why we collect it and the choices you have. It follows India’s Digital Personal Data Protection Act, 2023 (the DPDP Act) and its rules, and the Information Technology Act, 2000.

We play two roles:

• When you visit atithiai.in, ask for a consultation or use atithiai for your hotel, we decide how your data is used. We are the Data Fiduciary.
• When a guest messages a hotel that uses atithiai, the hotel decides how the guest’s data is used. The hotel is the Data Fiduciary, and we process the data only for the hotel, as its Data Processor. Our Data & security page explains how we handle guest data.

What we collect and why

The assistant chat on this website currently runs entirely in your browser: what you type there isn’t sent to us or stored. If you fill in the consultation form inside it, that form is handled as described above.

We don’t collect card numbers, bank account details or government ID numbers through atithiai. Guests pay deposits on the hotel’s own payment gateway, so their card and UPI details never reach us.

Your consent

When you book a consultation, you tick a box agreeing to be contacted about atithiai on WhatsApp, phone or email. That consent is our basis for using your details. You can withdraw it at any time: reply STOP on WhatsApp or email hello@atithiai.in, and we’ll stop contacting you straight away. Withdrawing doesn’t affect anything done before you withdrew.

For hotels that use atithiai, we use your data to provide the service you signed up for and to meet our legal duties, such as keeping tax records.

How we use personal data

We use personal data to:

• set up, run, support and improve the atithiai service;
• contact you about your consultation, your account and important service updates;
• keep atithiai secure, prevent misuse and fix problems;
• meet legal obligations, such as tax and accounting rules, and answer lawful requests from authorities.

We never sell or rent personal data, use it for advertising, or use guest conversations to train AI models — ours or anyone else’s.

Who we share it with

We share personal data only with the providers that help us run atithiai. Each may use it only to provide its service to us, and must protect it.

Guest deposits are paid into the hotel’s own payment gateway account, such as Razorpay, under the hotel’s agreement with that gateway. We use the hotel’s gateway keys only to create payment links and to check whether they’ve been paid.

We may also share personal data when the law requires it, to protect people’s rights or safety, or if atithiai is merged or sold — in which case this policy keeps protecting it.

Where your data is stored

Hotel and guest data is stored in India, in our database in the AWS Mumbai region. Some providers process data outside India to deliver their service: WhatsApp (Meta) runs globally, and Groq processes AI requests in the United States. Indian law allows these transfers; if the Government restricts transfers to any country, we will follow that restriction.

How long we keep it

How we protect it

• Data is encrypted in transit (HTTPS/TLS) and at rest in our database.
• Every hotel’s data is separated by row-level security, so no hotel can see another’s.
• Only our founding team can access production systems, with two-factor authentication on every admin account.
• We keep security logs for a year, and regular backups.
• If a personal data breach happens, we’ll tell the people and hotels affected without delay, and inform the Data Protection Board of India as the law requires.

The details are on our Data & security page.

Your rights

Under the DPDP Act, you can:

• get a summary of the personal data we hold about you, how we use it and who we’ve shared it with;
• have it corrected, completed or updated;
• have it erased, unless the law requires us to keep it;
• withdraw your consent;
• nominate someone to exercise these rights for you if you die or can’t act yourself;
• raise a grievance with us and, if our answer doesn’t resolve it, complain to the Data Protection Board of India.

To use any of these rights, contact our Grievance Officer below. We may need to confirm your identity first, and we reply within 30 days.

Hotel guests: the hotel decides how your data is used, so it’s best to contact the hotel first. If you contact us, we’ll pass your request to the hotel and help it respond. To have your data deleted, see Delete your data.

Outside India: if you’re in the EU, the UK or another country with its own data protection law, you may have further rights, such as to restrict or object to processing, to data portability, and to complain to your local data protection authority. Write to us and we’ll honour them.

Children

atithiai is a service for businesses and isn’t meant for anyone under 18. We don’t knowingly collect personal data directly from children. If you believe a child has given us their details, tell us and we’ll delete them.

Cookies and local storage

atithiai.in uses no cookies, no analytics and no advertising trackers. We store one small setting in your browser’s local storage — whether you chose the India or International version of the site — so it’s remembered next time. Your browser also tells the page your time zone so it can pick a version for you; that stays on your device unless you send the consultation form. You can clear local storage in your browser settings at any time.

Changes to this policy

We’ll update this policy when our practices change and show the new date at the top. If a change is significant, we’ll tell our customers by email or WhatsApp before it takes effect.

Grievance Officer and contact

Questions, requests and complaints about personal data go to our Grievance Officer:

We acknowledge every grievance within 48 hours and resolve it within 30 days.