Data Security

1. What We Protect

When you use Yavasa, you trust us with:

• Guest names, contact details, and ID information
• Booking records and payment records
• Your hotel's room, rate, and revenue data

We take that responsibility seriously.

2. How We Keep Your Data Secure

Encrypted in Transit

All data moving between your phone and our servers is encrypted using industry-standard TLS encryption. This helps protect data while it is being transmitted.

Secure Cloud Storage (Firebase)

Your data is stored on Google Firebase, a cloud platform used by businesses globally. We use cloud infrastructure to store and manage application data rather than maintaining our own physical servers.

Automatic Cloud Backup

Booking and guest records are backed up in the cloud. Identity documents are kept only on the device and are not backed up.

Biometric Authentication

Yavasa supports fingerprint and face unlock so you can use your device's biometric authentication to access the app.

Booking Deletion Control

Not every staff member can delete bookings. Access is controlled so your records are protected against unauthorized deletion.

3. Who Can Access Your Data

• You — through your account, subject to applicable access permissions.
• Yavasa's team — when needed to resolve a support issue, with access limited to what is necessary.
• Third parties — we do not sell your hotel's data to advertisers. Data may be processed by service providers where necessary to operate and support Yavasa, subject to applicable privacy obligations.

4. What Happens If There's a Breach

If we detect unauthorized access to your data, we will take appropriate steps to investigate and respond to the incident.

• We will notify affected users as appropriate.
• We will investigate the incident and take steps to address the issue.
• We will communicate relevant information about what happened and what data may have been affected.

If a breach affects guest data, we will inform the affected hotel within 72 hours. We will help it notify guests and the Data Protection Board of India as the DPDP Act requires.

Data Security at Yavasa – HTTPS, Firebase & DPDP Act aligned.