Privacy Policy

We collect personal data that you provide directly to us, data generated by your use of our service, and limited data from third parties.

Account and identity data: When you sign up or contact us for a demo, we collect your name, work email address, phone number, property name, and city or location.

Property and operational data: When you use Bockaa to run your property, we store the booking records, guest profiles, room configurations, pricing rules, staff accounts, and financial transactions you create within the app.

Guest data you enter: You may enter personal data about your guests (name, contact details, ID information, stay history) into Bockaa on behalf of your property. For this data you are the data fiduciary and we act as a data processor.

Usage and device data: We automatically collect log data including your IP address, browser type, operating system, pages visited, and timestamps. We use cookies and similar technologies for authentication, preferences, and analytics.

Communications: If you contact our support team via email or WhatsApp, we retain those communications to resolve your query and improve our service.

We use your personal data for the following purposes:

Providing and improving the service: To create and manage your account, process your bookings data, deliver product features, and fix bugs.

Communications: To respond to support queries, send service notifications (e.g. billing reminders, downtime alerts), and — only with your consent — share product updates and offers.

Analytics and product improvement: To understand how the product is used in aggregate, identify performance issues, and prioritise new features.

Legal compliance: To comply with applicable laws including India's DPDPA 2023, GST regulations, and court orders.

Security: To detect and prevent fraud, abuse, and unauthorised access.

We do not sell your personal data or your guests' personal data to any third party for marketing purposes.

We share your data only as necessary to deliver the service:

Infrastructure and hosting: Your data is hosted on DigitalOcean (Bangalore, India) and Amazon Web Services (India region). Both providers operate under strict data processing agreements and are bound by equivalent data protection standards.

Analytics: We use privacy-respecting analytics tools to understand product usage in aggregate. These tools do not receive guest PII.

Payment processors: If you pay for a Bockaa subscription online, the payment is processed by a PCI-DSS-compliant gateway. We do not store raw card numbers.

Professional advisors: We may share limited data with lawyers, accountants, or auditors under confidentiality obligations.

Legal requirements: We may disclose data when required by law, court order, or a competent government authority.

We require all processors to maintain adequate security and to use data only for the purposes we specify.

We retain your account data for as long as your subscription is active. After account closure, we delete or anonymise personal data within 90 days, except where we are required to retain records for legal or tax compliance (typically 7 years for financial records under Indian law).

Guest data you have entered is deleted alongside your account unless you request an earlier export. Backup copies are purged within 30 days of the main deletion.

Server logs are retained for up to 90 days for security and debugging, then automatically deleted.

Under India's Digital Personal Data Protection Act 2023 you have the following rights regarding your personal data:

Right of access: You may request a summary of the personal data we hold about you and the purposes for which it is processed.

Right of correction: You may request correction of inaccurate or incomplete personal data.

Right of erasure: You may request deletion of your personal data. We will fulfil erasure requests within 30 days subject to legal retention obligations. To delete your Bockaa account and all associated data, please use our account deletion page.

Right to grievance redressal: If you have a complaint about how we handle your data, you may raise it with our Grievance Officer (see contact details below). We will respond within 30 days.

Right to nominate: You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email us at support@bockaa.com with the subject line "DPDPA Data Request".

We use strictly necessary cookies for authentication (session tokens) and preference storage (theme, language). These cannot be disabled without breaking core functionality.

We use analytics cookies to understand aggregate usage patterns. You may opt out of analytics cookies by adjusting your browser settings or using a browser extension that blocks tracking.

We do not use advertising cookies or share data with advertising networks.

We implement industry-standard security measures including:

• All data encrypted in transit using TLS 1.2 or higher
• Data encrypted at rest using AES-256
• Access controls limiting staff access to data necessary for their role
• Regular security reviews and penetration testing
• Automatic daily backups with point-in-time recovery

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@bockaa.com.

Bockaa Bookings is a business software product intended for use by adults operating hospitality properties. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) and by posting a notice in the Bockaa app at least 7 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

The date at the top of this page ("Last updated") indicates when the policy was last revised.

For any privacy-related queries, data requests, or complaints, please contact our Grievance Officer:

Name: Aboobakkar Sadhik Email: bockaabusiness@gmail.com Address: Bockaa, Arakkal Mall, 2nd Floor, Kadappady, Malappuram, Kerala, India

We aim to respond to all queries within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDPA 2023.