Privacy policy
Last updated 6 October 2026
This page explains what personal data we collect, why, and the choices you have. It follows the Digital Personal Data Protection Act, 2023.
What we collect
Only what we need to run your account and your bookings:
- Name, mobile number and email address
- Booking details and messages with your host
- Identity documents for host verification and guest check-in (stored privately; we keep only the last four characters of an ID number)
- Payout details for hosts, stored encrypted
- Trip planner requests: the destination, dates, travellers and preferences you enter, with the name and contact you give for the quotation
- Basic device and usage information to keep the service secure
Trip planner
When you build a trip plan, our travel desk receives it with your contact details so we can confirm prices and help you book. To write the itinerary and look up prices we send only the trip details (place, dates, number of travellers, budget, interests and your note) to Google's Gemini service. Your name, mobile number and email are not sent to it. Anyone with the link to a plan can open it, so share the link only with people you trust.
Voice assistant
The "Talk to us" assistant on this website is an AI assistant, not a person. What you say or type to it is sent to Google's Gemini service to prepare the answer, and when you speak, your browser's own speech service turns your voice into text. If you give it your name, mobile number or email, it passes them with a summary of the conversation to our travel desk by email so we can call you back. Please do not tell it card numbers, OTPs or passwords; it never needs them.
Travel partners
If you reach us through a travel partner's link, or our travel desk asks a verified travel partner to arrange your trip, that partner receives your name, contact details and trip plan so that they can help you. Partners may use these details only for that trip.
If you register as a travel partner, we keep your business and contact details, the photo, photo ID and business documents you upload to verify you, and your bank or UPI details to pay your commission. Documents and bank details are stored encrypted and are seen only by our verification and accounts team. You can ask us to delete them when you leave the programme.
How we use it
To create your account, process bookings and payments, share the details a host and guest need from each other, meet tax and legal duties, prevent fraud, and send booking updates by SMS, WhatsApp and email.
Offers and marketing
We call or message you with offers only if you ticked the offers box when signing up. You can withdraw that consent at any time by writing to us; booking updates will still reach you.
Who we share it with
Your host or guest for a confirmed booking, our payment partner Razorpay, our SMS and storage providers, and authorities when the law requires it. We do not sell personal data.
Your rights
You can ask to see, correct or delete your data, or withdraw consent, by writing to operation@nirvanabnb.com. Some records must be kept for tax and legal reasons.
Card and bank details
Payments are handled by Razorpay. Card numbers, UPI PINs and net-banking passwords never reach our servers.