Privacy Policy

Eden's Home is committed to protecting the personal data of everyone who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.

This policy is written to comply with India's Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000. By using our platform, you agree to the practices described here.

Eden's Home is operated by Aviral Sharma, registered under Shop & Establishment Act (Delhi) and Udyam Registration, with principal offices in New Delhi, India. We act as the Data Fiduciary for all personal data collected through this platform.

We collect personal data only to the extent necessary to operate the platform and provide our services. This includes:

• Full name — used for booking confirmation and communication
• Email address — used for account creation, booking notifications, and support
• Phone number — used for booking coordination, WhatsApp-based chat, and OTP verification
• Booking details — check-in and check-out dates, number of guests, property selected
• Payment-related information — processed through Razorpay; we do not store card numbers or full banking credentials
• Billing address — collected when you request an invoice or GST receipt
• Identity verification documents — requested in specific situations such as dispute resolution
• Chat and inquiry content — messages sent through our website chat (Aven) and WhatsApp assistant
• Device and session data — IP address, browser type, pages visited, and session identifiers

We collect and use personal data for the following purposes, each of which corresponds to a legitimate basis under the DPDP Act:

• Processing and confirming bookings — necessary to perform the booking contract
• Communicating check-in instructions, property details, and booking updates — necessary to perform the contract
• Providing customer support and resolving disputes — legitimate interest and legal obligation
• Coordinating with property owners on your behalf — necessary to provide the service
• Fraud prevention and platform security — legitimate interest
• Platform analytics to improve performance — legitimate interest, using aggregated data where possible
• Sending service-related notifications — necessary to perform the contract

We do not use your personal data for unsolicited marketing without your explicit consent.

To provide our services, we share certain data with trusted third-party processors. Each processor is listed below with what data they receive and why:

• Razorpay (payment processing) — receives transaction amount, name, email, and phone to process payments. Razorpay is PCI-DSS compliant and processes payment data under their own privacy policy.
• OpenRouter and Groq (AI processing) — when you use our AI chat assistant (Aven), your messages are processed by these providers to generate responses. No personally identifiable data is stored by these providers beyond the immediate request.
• Meta (WhatsApp Business API) — when you interact with our WhatsApp assistant, messages are routed through Meta's infrastructure. Meta processes this data under their Business Terms of Service.
• Supabase (database infrastructure) — stores all platform data including bookings, accounts, and sessions. Supabase servers are located in the United States (see cross-border transfer section below).
• Vercel (hosting and CDN) — all web traffic passes through Vercel's infrastructure, which is operated from the United States.

We do not sell your personal data to any third party.

Eden's Home's infrastructure uses services hosted in the United States of America. This means that your personal data may be transferred to and processed in a country outside India.

The services involved are Supabase (database), Vercel (hosting), OpenRouter and Groq (AI processing). These providers operate under standard contractual mechanisms and data protection frameworks applicable to their jurisdictions.

By using our platform and consenting to this Privacy Policy, you consent to this cross-border transfer of your personal data.

We use cookies and similar technologies to operate the platform. Cookies are small files stored in your browser. We use them to:

• Maintain your login session so you remain signed in
• Remember your preferences and booking state during checkout
• Enable secure payment processing (Razorpay sets its own session cookies)
• Measure platform usage patterns to improve performance

You can disable cookies through your browser settings. Doing so will prevent login and checkout from working correctly. For full details, please see our Cookie Policy.

We retain personal data only as long as necessary for the purposes it was collected:

• Booking records — retained for 5 years from the date of the stay, in line with standard accounting and dispute resolution requirements
• Account data — retained for as long as your account is active. Deleted accounts are purged after 90 days.
• Chat and support conversations — retained for 12 months from the date of the conversation
• Payment records — retained as required by Razorpay and applicable Indian financial record-keeping requirements

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access — you can request a summary of what personal data we hold about you
• Right to correction — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can request deletion of your data, subject to any legal obligations we have to retain it
• Right to nominate — you can nominate another person to exercise your rights on your behalf in the event of your incapacity or death
• Right to withdraw consent — where we rely on consent as the basis for processing, you can withdraw it at any time. Withdrawal does not affect processing already done.
• Right to grievance redressal — if you believe we have violated your data rights, you can file a complaint with our Grievance Officer (see below)

To exercise any of these rights, contact our Grievance Officer at avirals@edenshome.in. We will acknowledge your request within 24 hours and resolve it within 30 days.

Our platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a child has provided us personal data without parental consent, please contact us and we will delete it promptly.

We implement technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include encrypted data storage (Supabase), HTTPS on all web traffic, HMAC-signed API communication between platform components, and row-level security policies on all database tables.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining appropriate safeguards.

In accordance with the DPDP Act, 2023 and the IT (Intermediary Guidelines) Rules, 2021, Eden's Home has appointed a Grievance Officer to handle complaints related to data privacy and platform use.

The Grievance Officer will acknowledge complaints within 24 hours and endeavour to resolve them within 30 days.

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. For material changes, we will notify registered users by email.

Continued use of the platform following any update constitutes acceptance of the revised policy.