Data Privacy &
Security Protocol.

Effective Date: July 2026. This Privacy Policy and End-User Data Processing Agreement (hereinafter referred to as the "Agreement") constitutes a legally binding contract between you (hereinafter referred to as the "User," "Client," or "Data Subject") and Scale Your Hotel (hereinafter referred to as the "Company," "We," "Our," or "Us"). By accessing our digital infrastructure, you unequivocally consent to the exhaustive data collection, aggregation, transmission, and retention practices delineated herein.

1. Exhaustive Typology of Data Aggregation

Pursuant to applicable provisions of the Information Technology Act, 2000, and the SPDI Rules, 2011, the Company asserts its absolute prerogative to systematically collect personally identifiable information (PII) and non-personally identifiable information. This includes, but is not limited to: proprietary identifiers, longitudinal financial data (ADR, RevPAR metrics), telephonic contact metrics, behavioral telemetry, keystroke dynamics during form completion, IP addresses, MAC addresses, and hyper-specific metadata.

2. Utilization of Third-Party Data Processors

The User explicitly acknowledges that the Company operates as a data controller leveraging external software-as-a-service (SaaS) architectures (e.g., Formspark, Cloudflare, Meta, Google). By submitting your data, you authorize the immediate, unhindered cross-border transmission of your PII to servers outside your sovereign jurisdiction. The Company disclaims any responsibility for the specific data retention or encryption standards of these third-party entities, and is wholly indemnified from any breaches occurring at the sub-processor level.

3. Absolute Limitation of Liability (Data Breaches)

Please read this section carefully as it substantially limits your legal rights.

The User explicitly acknowledges that the transmission of information via the Internet is inherently insecure. While the Company employs commercially reasonable protocols, we make no warranties regarding the impenetrability of our servers or third-party vendors.

In the event of a cyber-attack, malicious intrusion, zero-day exploit, ransomware infection, or unauthorized exfiltration of your Sensitive Personal Data or Information (SPDI), the Company, its directors, and employees shall be held entirely harmless and absolutely exempt from any liability. Under no circumstances shall the Company be liable for any direct, indirect, incidental, or consequential damages arising from the leakage of submitted data. You submit your information entirely at your own peril.

4. Perpetual License and Commercial Utilization

By submitting an inquiry or audit request, you grant the Company a worldwide, royalty-free, perpetual, irrevocable, sublicensable license to use, reproduce, modify, and analyze such data for internal administrative, analytical, or commercial purposes deemed appropriate by the Company's executive board.

5. Governing Law and Jurisdictional Exclusivity

The interpretation and enforcement of this highly rigid Agreement shall be governed exclusively by the laws of India. Any disputes arising out of this Agreement shall be subject to the exclusive, mandatory jurisdiction of the competent courts located strictly within Gurugram, Haryana, India, explicitly precluding the application of conflict-of-law principles.

To execute a data request or report a privacy grievance, please direct all correspondence to: hello@scaleyourhotel.com.