Privacy Policy

Who we are

Kyasti is a software-as-a-service platform in India for property discovery, booking, stay management, landlord tooling, and vendor workflows. Independent property operators use Kyasti to run their own PG, hostel, and similar lodging businesses. When this policy says “we”, it means Kyasti as the provider of these software services, not as the occupier of a customer’s premises (unless a separate written agreement says otherwise). Contact: info@kyasti.com.

Information we collect

Depending on how you use Kyasti, we may collect:

• Account details such as name, phone number, email, and profile photo (accounts are typically secured with phone OTP)
• Booking and stay information including property preferences, move-in dates, co-occupants you invite, police/verification forms where required, and support tickets
• Identity and compliance data via DigiLocker KYC and related verification flows (for example name, gender, date of birth, photo, and care-of details returned by DigiLocker), plus any documents you upload when asked
• Landlord or vendor business details such as trade, cities served, bank payout details, and work history on Kyasti
• Device and usage data such as IP address, browser type, page views, product events (for example browse, booking, and payment steps), crash diagnostics, and approximate location derived from your activity
• Marketing and partner enquiry details you submit (for example name, phone, email, city, property interest, and notes on landlord or contact forms)

How we use information

We use personal information to:

• Create and secure accounts, send OTPs, and verify phone numbers
• Show listings, process inquiries and bookings, manage stays, dues, tickets, and meter/utility charges
• Complete DigiLocker KYC and share verified identity status with the property operator for your stay
• Process payments and payouts with our payment partners (card/UPI details are handled by those partners; we receive payment status and references)
• Respond to partner/landlord enquiries, improve the product, comply with law, prevent fraud/abuse, and respond to lawful requests

DigiLocker KYC

Where a listing or booking requires identity verification, Kyasti may redirect you to DigiLocker (or a similar official identity flow). You choose what to share through DigiLocker. We use the verified attributes returned to us to confirm who is moving in and to meet property compliance needs.

KYC data is shared with the relevant property operator/staff for your booking. We do not sell KYC data. If DigiLocker is unavailable or verification fails, you can retry from your account or contact us for help.

Police verification forms

Where a property operator turns on police verification in Kyasti, we may collect occupant details and related documents needed to prepare a local police or municipal form, and we share that packet with the operator’s staff so they can print, file, and upload a stamped copy. Optional Aadhaar front and back photos for that packet are deleted when police verification is cleared. We process this information to run the software workflow the operator requested.

If the operator turns police verification off, Kyasti will not require or collect that packet for affected bookings. That setting is the operator’s choice and does not mean local police or municipal intimation is legally unnecessary. The property operator remains responsible for local compliance. We do not sell this data.

Sharing

We share information with property operators and staff for the stay you booked; with landlords or vendors when needed to fulfill a contract, ticket, or enquiry you started; with payment, DigiLocker/KYC, hosting, messaging, error monitoring (Sentry), and analytics (Google Analytics) providers who process page views and conversion events for us under contracts; and when required by law or to protect rights and safety. We do not sell your personal information.

Retention

We keep information for as long as your account is active and as needed for bookings, KYC audit trails, accounting, dispute resolution, and legal retention duties. Enquiry form data is kept long enough to follow up and for related compliance. When data is no longer required, we delete or anonymize it where practical.

Security

We use access controls, encryption in transit, and operational safeguards. No method of transmission or storage is perfectly secure — protect access to your phone and DigiLocker, and tell us promptly if you suspect unauthorized access.

Your choices

You can update profile details in your account, request access or correction, or ask us to delete account data where we are not required to keep it. You control DigiLocker sharing at the point of verification. Marketing messages, if any, can be opted out via the message instructions or by contacting us at info@kyasti.com.

Changes

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date. Continued use of Kyasti after changes means you accept the updated policy.