Privacy Policy
Defined with respect to user journey & platform flow • Last updated: August 2026
At Weekendnest, we believe privacy should be transparent, understandable, and tied directly to how you use our platform. This policy outlines how your information is gathered, protected, and managed across each step of your user journey.
Zero Password Storage
Passwordless authentication via 60-second Email OTPs ensures zero risk of password leaks.
30-Day Recovery Grace
Deactivated accounts can be restored seamlessly for 30 days before permanent erasure.
PCI-DSS Payments
Bank credentials and credit cards are processed directly via secure payment gateways.
Data Protection Across User Flows
1. Account Creation & Sign-in Flow
How your identity and session credentials are handled during OTP login and registration.
Data Collected
Full Name, Email Address, and 10-digit Mobile Number.
Authentication Method
Secure, passwordless Email OTP verification. One-time codes expire automatically in 60 seconds.
Session Security
Signed JWT tokens stored in HttpOnly, SameSite=Strict cookies to protect against unauthorized access and XSS.
2. Search, Wishlists & Browsing Flow
Data collected to personalize stay recommendations and remember your favorite properties.
Search Preferences
Destination filters, stay dates, guest counts, budget preferences, and amenity tags (e.g. Private Pool, Pet-friendly).
Wishlist Storage
Properties you save to your wishlist are securely linked to your account profile.
Analytics & Cookies
Session state is used strictly to enhance browsing performance and search speed. We do not sell search history to advertising brokers.
3. Booking, Payment & Invoices Flow
How transaction records, guest details, and billing invoices are processed.
Guest Information Shared
Upon booking confirmation, your Name and Contact Number are shared only with the assigned Property Host to coordinate check-in.
Payment Data Security
All online payments are processed through PCI-DSS certified payment gateways (Razorpay). Weekendnest never stores raw credit/debit card numbers or CVV codes.
Invoices & Compliance
Booking invoices, tax breakdowns, and payment confirmation receipts are generated and archived to meet statutory and financial audit requirements.
4. Host Onboarding, Verification & Payouts
Handling government identification documents, property listings, and payout accounts.
Identity Verification
Property hosts submit Aadhaar and PAN documents for identity validation and platform trust.
Encrypted Storage
Government ID documents are stored in access-controlled, private storage buckets with strict server-side encryption.
Bank & Payout Data
Bank account numbers, IFSC codes, or UPI IDs provided for host earnings payouts are encrypted and utilized exclusively for disbursing verified booking funds.
5. Account Deactivation & 30-Day Recovery Flow
Your complete control over account deactivation, grace period, and permanent data erasure.
Immediate Deactivation
When you deactivate your account via Account Settings, your profile, active listings, and wishlist are hidden immediately from public view.
30-Day Recovery Window
You can restore your account, active bookings, and listings anytime within 30 days simply by signing back in with your Email OTP.
Permanent Deletion
After 30 days, personal data is permanently anonymized or purged. Verified historical financial invoices are retained solely as required by applicable tax laws.
6. Reviews & Communication Flow
Post-stay review requests, booking updates, and notification delivery.
Stay Reviews
Once a stay is completed, automated review notifications and emails allow guests to rate and review their experience.
Transactional Alerts
Emails and in-app notifications are sent for booking confirmations, cancellations, refund status, and account security notices.
Communication Privacy
In-app host-guest messages are stored securely and monitored only for safety, trust, and dispute resolution.
Your Privacy Rights & Controls
You retain complete control over your data on Weekendnest. You can exercise the following rights at any time: