Privacy Policy

This Privacy Policy explains what personal data OurGate collects, why we collect it, how it is stored and secured, who it is shared with, and what rights you have over it. It applies to both Host companies and the Guests they invite to verify a booking.

We process Guest identity data on the basis of explicit consent, given at the point of upload after the Guest has reviewed our Terms & Conditions. We process Host account and billing data on the basis of contractual necessity — to provide the service the Host has signed up for.

• Identity documents are stored in a private object storage bucket, never publicly accessible.
• Documents are viewed only via short-lived, single-use signed links generated on demand.
• Passwords are hashed, never stored in plain text.
• Guest sessions are scoped to a single booking and expire automatically.
• Access to guest identity data within a Host account is controlled by a permission system — not every team member can view it by default.

OurGate's data handling is designed around the core principles found in India's Digital Personal Data Protection Act 2023 (DPDPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) — including purpose limitation, data minimization, and data-subject rights such as access and deletion.

We use a minimal set of cookies and local browser storage required to keep you logged in and to remember that you have acknowledged our cookie notice. We do not use third-party advertising or tracking cookies.

Guest identity documents are retained to support the Host's booking records unless a deletion request is submitted. To request deletion, a Guest can use the request option on their verification link, or contact us directly at the details below. We aim to action deletion requests within a reasonable time and will confirm once complete.

OurGate is intended for use by adults booking or managing accommodation. We do not knowingly collect identity documents from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

In the event of a personal data breach that is likely to result in a risk to the rights of affected Guests or Hosts, we will take prompt steps to contain and assess the breach and will notify affected individuals and, where legally required, the applicable data protection authority, without undue delay.

This Privacy Policy is governed by the laws of India. Any dispute arising under it is subject to the exclusive jurisdiction of the courts at Ghaziabad, Uttar Pradesh, India.

For any privacy questions, data access requests, or deletion requests, contact us at urbanescape09@gmail.com or by phone at 9958780399. In accordance with India's Digital Personal Data Protection Act and applicable IT Rules, our Grievance Officer can be reached at the same email address. We aim to acknowledge grievances promptly and resolve them within a reasonable time.