Privacy Policy

Bookitt (“we”, “us”) operates an online marketplace that connects travelers with verified farm stay hosts across India. We collect only the information needed to provide a safe, seamless booking experience and to comply with Indian law.

When you sign up we collect your name, email address, phone number, profile photo, and authentication identifiers. If you sign in with Google, we receive your basic Google profile per the scopes you approve.

For each reservation we store the property booked, dates, number of guests, special requests, and messages exchanged with the host. This history is visible in your trips dashboard and to the host of the listing you booked.

Payments are processed by Razorpay. Bookitt does not store your full card or UPI details on its servers. We receive only a payment reference, status, and the amount charged. All payment data is transmitted over TLS and tokenised by the processor.

The “Find stays near me” feature requests browser geolocation only after you tap it. Your coordinates are used in-memory to sort nearby farms and are never stored against your account.

Listing locations and directions are rendered using Google Maps. By interacting with a map you also agree to Google’s Privacy Policy and Terms of Service.

We use a small number of essential cookies for authentication sessions, plus optional cookies for preferences. You can clear or block cookies at any time in your browser; some features (such as staying signed in) will stop working.

Aggregated, non-identifying analytics help us understand which listings and pages perform well. We do not sell analytics data to advertisers.

Photos uploaded by hosts are stored with Cloudinary and may be optimised, resized, and cached on a global CDN to load quickly. Hosts grant Bookitt a non-exclusive licence to display these photos on the marketplace and in promotional surfaces.

Hosts: we collect listing details, address, bank/UPI payout reference, and verification documents where applicable. Guests: only the information required to deliver and protect the booking is shared with the host.

Transactional emails (bookings, receipts, security) cannot be turned off while your account is active. Marketing emails are opt-in and can be unsubscribed from at any time.

Authentication and database access are managed by Supabase with row-level security enforced server-side. Traffic is encrypted in transit (HTTPS/TLS) and at rest. We follow the principle of least privilege for internal access.

Bookitt relies on the following sub-processors: Supabase (auth, database, storage), Razorpay (payments), Cloudinary (image hosting), and Google Maps (location services). Each operates under its own privacy framework.

You may request a copy, correction, or deletion of your personal data by writing to privacy@bookitt.in. We will respond within 30 days as required under applicable Indian law.

Questions? Email privacy@bookitt.in. You can also read our Terms & Conditions.