Privacy Policy

1. Overview

HotelFlexi, owned and operated by NovaX AI ("we", "our", or "us"), is committed to safeguarding the privacy and operational confidentiality of hotel owners, management staff, and guests. This Privacy Policy details our data collection, encryption, tenant isolation, and regulatory compliance practices across India and international regions.

2. Information We Collect

We collect information strictly necessary to operate our cloud hospitality management platform:

• Account Credentials: User email, authorized staff name, contact phone number, and authenticated session tokens.
• Hotel Operational Information: Property name, legal entity name, GSTIN number, room categories, rate cards, and floor plans.
• Guest Folios & Registrations: Primary guest names, contact details, arrival and departure timestamps, room charges, and tax splits. We never store raw payment card data on our servers; all electronic settlements process via PCI-DSS Level 1 certified gateways (Razorpay).

3. Storage & Cryptographic Tenant Isolation

HotelFlexi enforces strict server-side tenant isolation on every database query. Hotel data belonging to one property is cryptographically segregated from other accounts. All data in transit is encrypted using TLS 1.3, and data at rest is protected with AES-256 encryption across global edge nodes.

4. Contact & Data Rights

Under Indian Digital Personal Data Protection (DPDP) principles, hoteliers retain complete ownership of their guest and financial data. You may request data exports in CSV format at any time from your settings or by writing to info@novaxai.in.