HomeExploreHow It WorksPricingAboutContact
Sign inGet tokens
Home / Privacy Policy

Privacy Policy

Effective Date: 4 September 2025 · Last Updated: 4 September 2025

1. INTRODUCTION

Welcome to Stayzee.

Stayzee ("Stayzee", "Company", "Platform", "we", "our", or "us") is a technology-enabled online platform developed to simplify the process of discovering, evaluating, and connecting with rental accommodations for students and educational communities. Our platform enables students to search for verified hostels, paying guest accommodations (PGs), shared apartments, private rooms, and other residential options while allowing landlords and property owners to advertise their available accommodations to prospective tenants.

At Stayzee, we recognize that personal information is an essential component of every individual's digital identity. We are committed to protecting the privacy, confidentiality, and integrity of the information entrusted to us. This Privacy Policy explains, in a transparent and comprehensive manner, how we collect, receive, store, organize, process, analyze, use, disclose, transfer, retain, and protect your personal information whenever you access or use any service provided through the Stayzee Platform.

This Privacy Policy has been drafted in accordance with generally accepted privacy principles and applicable laws governing electronic records, digital platforms, and personal information. It is intended to provide users with a clear understanding of our privacy practices, the purposes for which personal information is collected, the safeguards implemented to protect such information, and the rights available to users concerning their personal data.

Stayzee primarily operates as an intermediary technology platform. Except where expressly stated otherwise in writing, Stayzee does not own, lease, rent, manage, supervise, construct, maintain, or operate any hostel, paying guest accommodation, apartment, residential building, or other property listed on the Platform. The information displayed on the Platform is generally provided by independent landlords, property owners, hostel operators, or their authorized representatives.

Accordingly, any agreement relating to tenancy, occupancy, leave and license, rent, security deposits, maintenance charges, utilities, property possession, cancellation, refunds, extensions, or similar residential arrangements is entered into solely between the Student User and the respective Property Owner. Stayzee is not a party to such agreements and shall not be deemed to assume the legal responsibilities of either party merely because the introduction or communication originated through the Platform.

By accessing, browsing, registering on, or otherwise using Stayzee, you acknowledge that you have carefully read this Privacy Policy, understand its contents, and voluntarily agree to the collection, processing, and disclosure of your information in the manner described herein.

This Privacy Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021

2. DEFINITIONS

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below unless the context clearly requires otherwise.

2.1 "Account"

An electronic profile created by a user for accessing Stayzee's services, managing listings, purchasing tokens, communicating with other users, maintaining preferences, and utilizing the various features offered through the Platform.

2.2 "Applicable Law"

Any statute, regulation, notification, rule, ordinance, governmental direction, judicial order, administrative guideline, or legally enforceable requirement applicable to Stayzee or its users under the laws of India or any other relevant jurisdiction.

2.3 "Personal Information"

Any information that identifies, relates to, describes, or is reasonably capable of identifying an individual, whether directly or indirectly.

Personal Information may include, without limitation:

  • Full name
  • Mobile number
  • Email address
  • Educational institution
  • Property information
  • Government identification details where required
  • Payment references
  • Communication records
  • Device identifiers
  • Internet Protocol (IP) address
  • Login history
  • Uploaded photographs
  • Verification records
  • Transaction history
  • User preferences
  • Technical identifiers
  • Any other information reasonably capable of identifying an individual.
We process Personal Information only for the purposes stated in this Policy and on the lawful grounds permitted under Section 4 and Section 7 of the Digital Personal Data Protection Act, 2023

2.4 "Student User"

Any individual using the Platform primarily for discovering, evaluating, or communicating regarding accommodation for educational purposes.

2.5 "Landlord"

Any property owner, hostel operator, paying guest operator, authorized property manager, representative, company, trust, institution, or individual legally entitled to advertise accommodation through the Platform.

2.6 "Platform"

Collectively refers to the Stayzee website, mobile applications, future mobile applications, administrative dashboards, APIs, cloud infrastructure, communication systems, databases, and every digital service officially operated under the Stayzee brand.

2.7 "Processing"

Any operation performed upon Personal Information including its collection, recording, organization, storage, modification, retrieval, consultation, analysis, transmission, disclosure, restriction, anonymization, deletion, destruction, or any other activity involving such information.

2.8 "Services"

Every product, feature, functionality, software component, verification process, communication facility, payment system, listing service, customer support service, token system, or future offering made available by Stayzee.

2.9 "Verification"

The internal review process undertaken by Stayzee to improve listing reliability through document review, communication verification, scout visits, ownership verification, identity review, or similar operational procedures.

Verification performed by Stayzee is intended solely to improve user confidence and shall not constitute legal certification, governmental approval, title verification, engineering inspection, structural audit, occupancy certification, or any guarantee regarding the legality, ownership, safety, or condition of a property.


3. INTERPRETATION

Unless the context otherwise requires, the following principles shall govern the interpretation of this Privacy Policy.

Words expressed in the singular include the plural and vice versa whenever the context permits.

Words importing one gender include every other gender.

The words "including," "includes," "such as," or similar expressions shall always be interpreted as "including without limitation."

Headings, numbering, formatting, examples, illustrations, and descriptive titles have been inserted solely for convenience and shall not affect the interpretation of any provision contained within this Privacy Policy.

References to any law or legislation shall include every amendment, replacement, reenactment, extension, consolidation, subordinate legislation, or successor enactment thereof.

Where any provision of this Privacy Policy is declared invalid, illegal, unenforceable, or void by a court or competent authority, the remaining provisions shall continue to remain valid and enforceable to the fullest extent permitted by applicable law.

Failure by Stayzee to immediately enforce any provision of this Privacy Policy shall not constitute a waiver of such provision or of the Company's right to subsequently enforce the same.

This Privacy Policy shall always be interpreted in a manner that reasonably balances user privacy, operational requirements, legal compliance, fraud prevention, platform security, and the legitimate interests of Stayzee.


4. ACCEPTANCE OF THIS PRIVACY POLICY

By visiting, accessing, browsing, registering on, downloading, installing, purchasing services from, listing properties upon, communicating through, uploading information to, or otherwise using any feature of the Stayzee Platform, you expressly acknowledge and agree that:

  • You have carefully read and understood this Privacy Policy.
  • You voluntarily consent to the collection and processing of your information where such consent is required by law.
  • The information provided by you is true, accurate, complete, and current to the best of your knowledge.
  • You possess the legal capacity to enter into binding agreements under applicable law.
  • You shall promptly update inaccurate or outdated information whenever reasonably possible.
  • Your continued use of the Platform after modifications to this Privacy Policy constitutes acceptance of those modifications.
  • You may withdraw your consent at any time by writing to [[email protected]](mailto:[email protected]) or by using the account settings (where available). Withdrawal of consent will not affect the lawfulness of processing done before the withdrawal.

If you disagree with any provision contained within this Privacy Policy, you must immediately discontinue use of the Platform and refrain from accessing any Stayzee services.

Nothing contained within this Privacy Policy shall limit any mandatory rights available to users under applicable law.


5. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to every interaction involving Stayzee, including but not limited to:

  • The official Stayzee website;
  • Mobile applications;
  • Progressive Web Applications (PWAs);
  • Administrative dashboards;
  • Customer support services;
  • Verification systems;
  • Payment interfaces;
  • Communication channels;
  • Surveys;
  • Referral programs;
  • Promotional campaigns;
  • Internship portals;
  • Recruitment portals;
  • Official email communications;
  • Official social media interactions where information is voluntarily submitted;
  • APIs;
  • Beta features;
  • Future products and services introduced under the Stayzee brand.

This Privacy Policy governs information collected:

  • before account registration;
  • during account creation;
  • while actively using the Platform;
  • after account deactivation where retention is legally required;
  • during customer support interactions;
  • through verification procedures;
  • from publicly available sources where legally permissible; and
  • from authorized third-party service providers engaged by Stayzee.

This Privacy Policy does not apply to third-party websites, payment gateways, external applications, advertisements, social media platforms, or independent services merely linked from the Platform. Such services operate under their own privacy policies, terms of service, and legal obligations.

Users are encouraged to independently review the privacy practices of every third-party service before submitting personal information.


6. ELIGIBILITY

The Stayzee Platform is intended primarily for college students, universities, educational institutions, landlords, property owners, hostel operators, and accommodation providers seeking to participate in lawful rental-related activities.

By accessing or using the Platform, every user represents and warrants that:

  • they possess the legal authority and capacity required to enter into binding agreements;
  • they shall use the Platform only for lawful purposes;
  • they shall not impersonate another individual or organization;
  • they shall not knowingly submit false, misleading, fraudulent, manipulated, forged, or inaccurate information;
  • they shall comply with all applicable laws governing privacy, cyber security, electronic communications, consumer protection, intellectual property, and housing-related regulations;
  • they shall cooperate with reasonable verification procedures where requested by Stayzee; and
  • they understand that Stayzee reserves the right to refuse registrations, suspend accounts, remove listings, or terminate access whenever reasonably necessary to maintain platform integrity, protect users, comply with legal obligations, prevent fraud, or investigate suspected misuse.

Where a user has not attained the age of 18 years, Stayzee will process their Personal Information only after obtaining verifiable consent of a parent or lawful guardian, in accordance with Section 9 of the Digital Personal Data Protection Act, 2023. Stayzee does not knowingly process personal data of children without such consent.

Stayzee reserves the absolute discretion to determine user eligibility, verify submitted information, request additional documentation, or decline access to any service where such action is reasonably necessary to protect the Platform, its users, or its legal and operational interests.

7. INFORMATION WE COLLECT

In order to provide, maintain, secure, improve, personalize, and lawfully operate the Stayzee Platform, we collect various categories of information from our users. The information collected depends upon the nature of your interaction with the Platform, the services you use, the permissions you grant, and the legal obligations applicable to Stayzee.

Information may be collected directly from you, automatically through your use of the Platform, from authorized third-party service providers, through communication with our customer support team, during verification procedures, from publicly available sources where legally permissible, or from information voluntarily submitted by other users while interacting with you through the Platform.

Stayzee follows the principle of data minimization, meaning that we endeavor to collect only such information as is reasonably necessary to provide our services, comply with legal obligations, improve platform functionality, protect users against fraud, resolve disputes, maintain security, and safeguard our legitimate business interests.

The categories of information described below are illustrative and not exhaustive. Depending upon future features introduced by Stayzee, additional categories of information may be collected, subject to applicable law and appropriate updates to this Privacy Policy.

We collect only such Personal Information as is reasonably necessary for the purposes listed in this Policy (data minimisation principle under the DPDP Act)

8. INFORMATION PROVIDED BY STUDENT USERS

When a Student User creates an account or interacts with the Platform, Stayzee may collect information necessary for account administration, accommodation discovery, communication with landlords, payment processing, verification, customer support, fraud prevention, and service improvement.

Such information may include, without limitation:

  • Full legal name;
  • Mobile telephone number;
  • Email address;
  • Educational institution or university name;
  • Degree program;
  • Academic year;
  • Campus location;
  • Preferred accommodation city;
  • Preferred locality;
  • Accommodation preferences;
  • Budget preferences;
  • Gender preference for accommodation where voluntarily specified;
  • Occupancy preferences;
  • Room-sharing preferences;
  • Search history;
  • Saved properties;
  • Wishlist entries;
  • Token purchase history;
  • Token redemption history;
  • Property unlock history;
  • Communication history with landlords;
  • Customer support interactions;
  • Complaint records;
  • Survey responses;
  • Reviews and ratings;
  • Profile photographs voluntarily uploaded;
  • Referral information;
  • Notification preferences;
  • Language preferences;
  • Accessibility preferences;
  • Verification status;
  • and any additional information voluntarily submitted through forms, emails, support requests, or other Platform features.

Users are responsible for ensuring that all information submitted is accurate, current, complete, and does not infringe the rights of any third party.


9. INFORMATION PROVIDED BY LANDLORDS AND PROPERTY OWNERS

To improve listing authenticity and user confidence, Stayzee may collect substantially more information from landlords, hostel operators, property managers, and accommodation providers.

Information collected may include:

  • Full legal name;
  • Mobile number;
  • Email address;
  • Residential address;
  • Business address;
  • Property address;
  • Landmark details;
  • Postal code;
  • Government-issued identity documents where requested;
  • Ownership documents;
  • Rental authorization documents;
  • Utility documents where voluntarily submitted;
  • Property photographs;
  • Interior room photographs;
  • Exterior building photographs;
  • Bathroom photographs;
  • Kitchen photographs;
  • Common area photographs;
  • Amenities;
  • Occupancy limits;
  • Rent amount;
  • Security deposit requirements;
  • Maintenance charges;
  • House rules;
  • Availability schedules;
  • Internet facilities;
  • Electricity arrangements;
  • Water supply details;
  • Parking facilities;
  • Food availability;
  • Laundry services;
  • Visitor policies;
  • Curfew policies;
  • Verification records;
  • Scout visit observations where applicable;
  • Listing statistics;
  • Customer reviews;
  • Payment references relating to listing fees;
  • Tax-related information where legally required;
  • Bank account details where required for lawful business purposes;
  • and any additional information reasonably necessary for operating or verifying the listing.

Submission of ownership documents or identity documents does not constitute a legal certification of ownership by Stayzee.


10. ACCOUNT REGISTRATION INFORMATION

Whenever a user creates an account, Stayzee may collect and maintain information necessary to establish, administer, and secure that account.

This information may include:

  • Name;
  • Email address;
  • Mobile number;
  • OTP verification status;
  • Account creation timestamp;
  • Referral source;
  • Registration source;
  • Authentication records;
  • Login history;
  • Device identifiers;
  • Browser information;
  • Password reset requests;
  • Security settings;
  • Session identifiers;
  • Multi-factor authentication status where available;
  • Recovery information;
  • Account suspension history;
  • Account deletion requests;
  • and administrative records necessary for account management.

Passwords or authentication credentials are processed using commercially reasonable security practices. Stayzee does not intentionally store passwords in plain text.


11. PROPERTY LISTING INFORMATION

Property owners voluntarily provide information relating to accommodation listings published through the Platform.

Such information may include:

  • Property title;
  • Listing description;
  • Room dimensions;
  • Number of available rooms;
  • Property type;
  • Furnishing details;
  • Appliances;
  • Utility facilities;
  • Internet availability;
  • Security arrangements;
  • CCTV availability;
  • Accessibility features;
  • Rental conditions;
  • Availability dates;
  • Pricing;
  • Promotional offers;
  • House rules;
  • Cancellation terms;
  • Photographs;
  • Videos where supported;
  • Virtual tours;
  • Geographic location;
  • Nearby educational institutions;
  • and supplementary information voluntarily submitted by the landlord.

Stayzee may modify listing presentation, categorization, image optimization, metadata, search indexing, and display formats to improve usability and Platform performance.


12. PAYMENT AND TRANSACTION INFORMATION

When users purchase tokens, pay listing fees, or utilize any paid service available on the Platform, Stayzee may collect information relating to such transactions.

Transaction information may include:

  • Order identifiers;
  • Transaction references;
  • Payment timestamps;
  • Payment status;
  • Invoice details;
  • Purchased services;
  • Token quantities;
  • Refund status;
  • Promotional discounts;
  • Coupon usage;
  • Tax calculations;
  • Merchant references;
  • Fraud prevention indicators;
  • Device information associated with payment attempts;
  • and internal accounting references.

For the avoidance of doubt, Stayzee does not intentionally collect or permanently store complete debit card numbers, credit card numbers, CVV values, UPI PINs, internet banking passwords, or similar confidential payment authentication credentials.

Payments are processed through authorized third-party payment service providers operating under their own privacy policies and regulatory obligations.


13. INFORMATION COLLECTED AUTOMATICALLY

Whenever users interact with the Platform, certain technical information may automatically be collected to ensure the stability, security, and efficient operation of the Platform.

Automatically collected information may include:

  • Internet Protocol (IP) address;
  • Browser type;
  • Browser version;
  • Device manufacturer;
  • Device model;
  • Operating system;
  • Operating system version;
  • Screen resolution;
  • Language preferences;
  • Time zone;
  • Network information;
  • Session duration;
  • Login timestamps;
  • Logout timestamps;
  • Clickstream information;
  • Search queries;
  • Feature usage;
  • Crash reports;
  • Error logs;
  • Performance metrics;
  • Device identifiers;
  • Cookies;
  • Local storage information;
  • Analytics identifiers;
  • Approximate geographic information;
  • and similar technical information generated through ordinary use of the Platform.

This information enables Stayzee to diagnose technical issues, improve performance, detect unauthorized activity, enhance user experience, and maintain platform security.


14. COOKIES, ANALYTICS, AND TRACKING TECHNOLOGIES

Stayzee may utilize cookies, browser storage, session identifiers, analytics tools, log files, and similar technologies to facilitate the operation of the Platform.

These technologies may be used to:

  • maintain user sessions;
  • remember login preferences;
  • preserve language settings;
  • improve page loading performance;
  • measure visitor statistics;
  • understand user behavior;
  • prevent fraudulent activity;
  • monitor application stability;
  • evaluate feature usage;
  • improve search relevance;
  • personalize content;
  • optimize marketing campaigns;
  • and generate aggregated statistical reports.

Users may disable certain cookies through browser settings; however, doing so may reduce the availability or functionality of specific Platform features.

Where applicable law requires consent for non-essential cookies or similar technologies, Stayzee shall endeavor to obtain such consent through appropriate mechanisms before such technologies are activated.


15. COMMUNICATIONS AND CUSTOMER SUPPORT

When users contact Stayzee through email, contact forms, customer support channels, or other official communication methods, we may collect and process information relating to such communications.

This may include:

  • Email correspondence;
  • Contact form submissions;
  • Complaint descriptions;
  • Customer support tickets;
  • Attachments;
  • Screenshots;
  • Technical logs voluntarily provided;
  • Voice recordings where legally permissible;
  • Survey responses;
  • Feedback;
  • Suggestions;
  • Feature requests;
  • Communication timestamps;
  • Resolution history;
  • and related administrative records.

Support communications may be retained for quality assurance, dispute resolution, training, legal compliance, fraud prevention, and continuous improvement of customer service.


16. INFORMATION WE DO NOT INTENTIONALLY COLLECT

Except where required by applicable law or expressly authorized by the user, Stayzee does not intentionally collect or request:

  • Biometric identifiers for identity recognition;
  • Medical or health records;
  • Religious beliefs;
  • Political opinions;
  • Trade union membership;
  • Genetic information;
  • Sexual orientation;
  • Confidential banking passwords;
  • UPI PINs;
  • ATM PINs;
  • Complete payment card authentication credentials;
  • or any other category of highly sensitive personal information unnecessary for providing our services.

Users are requested not to voluntarily submit unnecessary confidential information through ordinary communication channels unless specifically requested by Stayzee using secure methods.

16A. GROUNDS FOR PROCESSING UNDER DPDP ACT

Stayzee processes Personal Information on the following lawful grounds under the Digital Personal Data Protection Act, 2023:

  • Consent of the Data Principal (Section 6)
  • Legitimate use for performance of contract / provision of services (Section 7)
  • Compliance with legal obligations
  • Employment or similar purposes (where applicable)

17. HOW WE USE YOUR INFORMATION

Stayzee processes Personal Information only for legitimate, lawful, contractual, operational, security-related, administrative, and business purposes associated with the operation of the Platform. Every category of information collected by Stayzee is processed only to the extent reasonably necessary to provide our services, improve user experience, maintain platform integrity, comply with legal obligations, prevent fraud, and safeguard the legitimate interests of both our users and the Company.

The purposes described below are intended to provide transparency regarding our information handling practices. Depending upon future services, additional processing activities may be introduced, provided that such processing remains consistent with applicable law and this Privacy Policy.


18. ACCOUNT CREATION, AUTHENTICATION, AND ADMINISTRATION

One of the primary purposes of collecting Personal Information is to establish and maintain secure user accounts that enable access to the Platform's features and services.

Stayzee may process your information to:

  • Create and register your account;
  • Verify your identity through One-Time Password (OTP) authentication or other approved verification mechanisms;
  • Authenticate future login attempts;
  • Maintain secure user sessions;
  • Prevent duplicate or fraudulent account registrations;
  • Recover accounts when access credentials are forgotten;
  • Manage profile information and account settings;
  • Synchronize account information across supported devices;
  • Respond to account-related requests;
  • Process account suspension or restoration requests;
  • Administer user permissions;
  • Maintain records relating to account activity;
  • Facilitate secure logout procedures;
  • Generate internal administrative identifiers;
  • and otherwise administer user accounts in an efficient and secure manner.

Stayzee reserves the right to request additional verification information whenever reasonably necessary to protect users, investigate suspicious activity, comply with legal obligations, or preserve the integrity of the Platform.


19. PROVIDING PLATFORM SERVICES

The primary function of Stayzee is to connect individuals seeking accommodation with landlords and accommodation providers.

Accordingly, Personal Information may be processed for purposes including:

  • Displaying accommodation listings;
  • Providing search results based upon user preferences;
  • Filtering properties by location, budget, amenities, and occupancy;
  • Enabling token purchases;
  • Unlocking landlord contact information after successful token redemption;
  • Displaying saved properties and wishlists;
  • Providing personalized accommodation recommendations;
  • Maintaining recently viewed listings;
  • Supporting communication between users;
  • Providing property verification indicators;
  • Managing landlord dashboards;
  • Displaying listing statistics;
  • Generating invoices;
  • Processing refunds where applicable;
  • Providing customer support;
  • and delivering every feature made available through the Platform.

Without processing certain categories of Personal Information, many core services offered by Stayzee would become unavailable or substantially limited.


20. PROPERTY VERIFICATION AND QUALITY ASSURANCE

To improve user confidence and enhance the quality of listings available through the Platform, Stayzee may process Personal Information submitted by landlords, property owners, hostel operators, and accommodation providers during verification procedures.

Verification activities may include:

  • Reviewing submitted identity documents;
  • Examining ownership or authorization documents;
  • Comparing uploaded photographs with listing descriptions;
  • Conducting duplicate listing detection;
  • Reviewing listing completeness;
  • Scheduling scout visits where applicable;
  • Recording verification outcomes;
  • Identifying misleading information;
  • Detecting inconsistencies;
  • Monitoring listing quality;
  • Updating verification badges;
  • Maintaining verification history;
  • and investigating reports submitted by users.

Verification performed by Stayzee is intended solely to enhance user confidence and does not constitute legal certification of ownership, government approval, engineering inspection, structural safety certification, occupancy authorization, or any guarantee regarding the legality, quality, condition, or future availability of a property.


21. COMMUNICATION AND USER SUPPORT

Effective communication is fundamental to the operation of the Platform. Stayzee may therefore process Personal Information to communicate with users regarding matters connected with their accounts, listings, transactions, and use of the Platform.

Communications may include:

  • OTP verification messages;
  • Account notifications;
  • Transaction confirmations;
  • Listing approval or rejection notices;
  • Customer support responses;
  • Security alerts;
  • Password reset instructions;
  • Platform announcements;
  • Service updates;
  • Maintenance notifications;
  • Policy revisions;
  • Legal notices;
  • Survey invitations;
  • Feedback requests;
  • Promotional communications where permitted by applicable law;
  • Educational resources;
  • Feature announcements;
  • and other operational communications necessary for the administration of the Platform.

Certain communications are essential for the operation and security of the Platform and cannot be disabled while maintaining an active account.


22. PAYMENT PROCESSING AND FINANCIAL MANAGEMENT

Where users purchase tokens, pay listing fees, or utilize any paid feature offered through the Platform, Stayzee processes limited financial information necessary to facilitate such transactions.

Information may be processed to:

  • Confirm successful payments;
  • Generate invoices and receipts;
  • Maintain accounting records;
  • Process refunds where applicable;
  • Detect duplicate transactions;
  • Prevent payment fraud;
  • Reconcile financial records;
  • Calculate applicable taxes;
  • Resolve payment-related disputes;
  • Conduct financial audits;
  • Comply with statutory reporting obligations;
  • and maintain lawful financial documentation.

Payment authentication credentials are processed by authorized payment service providers. Stayzee does not intentionally retain complete payment card details, CVV numbers, ATM PINs, UPI PINs, internet banking passwords, or similar confidential financial authentication credentials.


23. FRAUD PREVENTION, SECURITY, AND RISK MANAGEMENT

Protecting users and maintaining the integrity of the Platform requires continuous monitoring of potentially fraudulent or malicious activities.

Accordingly, Personal Information may be processed to:

  • Detect fake accounts;
  • Identify suspicious login attempts;
  • Prevent identity theft;
  • Detect unauthorized account access;
  • Prevent spam submissions;
  • Identify automated bots;
  • Detect abusive platform behavior;
  • Investigate fraudulent property listings;
  • Monitor unusual transaction patterns;
  • Prevent token misuse;
  • Protect intellectual property;
  • Enforce Platform policies;
  • Maintain audit trails;
  • Preserve electronic evidence;
  • Investigate cybersecurity incidents;
  • Respond to lawful security requests;
  • and safeguard the legitimate interests of Stayzee and its users.

Stayzee reserves the right to temporarily suspend, restrict, investigate, or permanently terminate accounts whenever reasonably necessary to prevent fraud, protect users, or comply with legal obligations.


24. PERSONALIZATION AND USER EXPERIENCE

Stayzee endeavors to provide users with a more relevant and efficient accommodation discovery experience by utilizing information relating to previous interactions with the Platform.

Personalization activities may include:

  • Recommending accommodations matching previous searches;
  • Displaying recently viewed listings;
  • Remembering saved searches;
  • Preserving language preferences;
  • Displaying region-specific content;
  • Suggesting nearby accommodations;
  • Highlighting popular listings;
  • Improving search relevance;
  • Customizing notifications;
  • Maintaining user preferences;
  • Optimizing interface layouts;
  • and enhancing overall usability.

Personalization is intended solely to improve user experience and does not ordinarily involve automated decisions producing legal or similarly significant effects without appropriate safeguards where required by law.


25. RESEARCH, ANALYTICS, AND PLATFORM IMPROVEMENT

To ensure that the Platform continues to evolve in response to user needs, Stayzee may process information for internal research, product development, quality assurance, and analytical purposes.

Such processing may include:

  • Measuring feature usage;
  • Identifying navigation difficulties;
  • Evaluating user engagement;
  • Improving recommendation algorithms;
  • Optimizing search functionality;
  • Monitoring platform performance;
  • Diagnosing technical issues;
  • Reducing application crashes;
  • Forecasting infrastructure requirements;
  • Evaluating marketing effectiveness;
  • Understanding accommodation demand trends;
  • Conducting usability testing;
  • Improving accessibility;
  • Enhancing operational efficiency;
  • and generating aggregated statistical reports.

Where reasonably practicable, Stayzee shall utilize anonymized, aggregated, or pseudonymized information for research and analytical purposes.


26. LEGAL COMPLIANCE AND REGULATORY OBLIGATIONS

Stayzee may process Personal Information whenever reasonably necessary to comply with applicable laws, regulations, judicial orders, governmental directives, statutory reporting obligations, law enforcement requests, arbitration proceedings, or other legally binding processes.

Such processing may include:

  • Maintaining statutory records;
  • Responding to lawful governmental requests;
  • Cooperating with regulatory authorities;
  • Preserving electronic evidence;
  • Preventing unlawful activity;
  • Complying with taxation requirements;
  • Defending legal proceedings;
  • Exercising contractual rights;
  • Protecting intellectual property;
  • Resolving disputes;
  • and satisfying every other legal obligation imposed upon Stayzee.

Nothing contained in this Privacy Policy shall require Stayzee to disclose information where such disclosure is prohibited by law or subject to legally recognized privileges.


27. ARTIFICIAL INTELLIGENCE, AUTOMATED SYSTEMS, AND CONTENT MODERATION

To improve operational efficiency, user safety, and platform reliability, Stayzee may utilize automated software tools, machine learning systems, artificial intelligence technologies, rule-based detection mechanisms, and other computational techniques.

Such technologies may assist in:

  • Detecting duplicate property listings;
  • Identifying fraudulent documents;
  • Recognizing suspicious account activity;
  • Moderating reviews and user-generated content;
  • Detecting spam or abusive communications;
  • Improving property recommendations;
  • Categorizing uploaded photographs;
  • Prioritizing customer support requests;
  • Identifying unusual transaction behavior;
  • Monitoring platform health;
  • Generating operational insights;
  • and supporting administrative decision-making.

Automated systems are intended to supplement, and not necessarily replace, human review. Stayzee acknowledges that automated technologies may occasionally produce inaccurate classifications or recommendations, and appropriate human oversight may be applied where required by applicable law or internal operational procedures.


28. MARKETING, PROMOTIONAL, AND BUSINESS COMMUNICATIONS

Subject to applicable law and user preferences, Stayzee may use Personal Information to inform users about new services, product enhancements, promotional campaigns, referral programs, educational resources, partnership opportunities, seasonal offers, platform updates, and other information that may be relevant to their use of the Platform.

Users may opt out of receiving non-essential promotional communications by using the unsubscribe mechanisms provided within such communications or by updating their notification preferences where such functionality is available.

Opting out of promotional communications shall not affect the delivery of essential transactional, security-related, legal, or administrative communications necessary for the operation of the Platform or the protection of user accounts.

29. DISCLOSURE AND SHARING OF PERSONAL INFORMATION

Stayzee recognizes that Personal Information belongs to the individuals who provide it and treats such information as confidential. We do not sell, rent, or trade your Personal Information for monetary consideration as part of our ordinary business operations. However, in order to operate the Platform effectively, provide requested services, comply with applicable law, prevent fraud, protect users, and support legitimate business operations, Stayzee may disclose certain categories of Personal Information under the circumstances described in this Privacy Policy.

Whenever Personal Information is disclosed, Stayzee endeavors to disclose only the minimum amount of information reasonably necessary for the intended purpose. Where commercially reasonable, recipients of such information are expected to implement appropriate technical and organizational safeguards to protect its confidentiality and security.

Nothing contained within this Privacy Policy shall be interpreted as granting any third party unrestricted rights to use Personal Information for purposes unrelated to the services provided through the Platform.


30. INFORMATION SHARED BETWEEN STUDENTS AND LANDLORDS

The core functionality of Stayzee requires communication between prospective tenants and accommodation providers. Accordingly, certain information must necessarily be shared to facilitate inquiries, property viewings, and rental discussions.

Where a Student User successfully redeems tokens or otherwise unlocks a property listing, Stayzee may disclose information relating to the relevant Property Owner, including:

  • Name of the landlord or authorized representative;
  • Mobile number;
  • Email address, where applicable;
  • Property address;
  • Accommodation details;
  • Amenities and facilities;
  • Rental terms and conditions;
  • Verification indicators displayed on the Platform;
  • Property photographs;
  • Availability information;
  • and other details intentionally published by the Property Owner.

Similarly, landlords may receive limited information regarding prospective student inquiries, including:

  • Student name;
  • Contact details;
  • Educational institution, where voluntarily provided;
  • Date and time of inquiry;
  • Property viewed;
  • Communication history conducted through the Platform;
  • Token redemption confirmation where applicable;
  • and any additional information voluntarily shared by the Student User.

Once such information has been shared between independent users, Stayzee cannot control, monitor, or restrict how those users subsequently store, copy, forward, disclose, or otherwise process such information. Users are therefore encouraged to exercise appropriate caution when sharing personal information with other users.


31. THIRD-PARTY SERVICE PROVIDERS

To ensure the reliable, secure, and efficient operation of the Platform, Stayzee may engage carefully selected third-party vendors, contractors, consultants, technology providers, infrastructure partners, and professional service providers.

These service providers may assist Stayzee in performing functions including, but not limited to:

  • Cloud hosting;
  • Database management;
  • Content delivery;
  • Image optimization and storage;
  • Email delivery;
  • SMS and OTP services;
  • Payment processing;
  • Analytics;
  • Application monitoring;
  • Crash reporting;
  • Customer support systems;
  • Identity verification;
  • Fraud detection;
  • Cybersecurity monitoring;
  • Logging and audit services;
  • Backup and disaster recovery;
  • Notification services;
  • Mapping and geolocation services;
  • Search indexing;
  • Marketing automation;
  • and other operational functions necessary for providing Platform services.

Such service providers are generally permitted to process Personal Information only on behalf of Stayzee, solely for the purposes specified by Stayzee, and subject to contractual obligations requiring confidentiality, security, and compliance with applicable law.

The engagement of a third-party service provider shall not transfer ownership of Personal Information to that provider.


32. PAYMENT GATEWAYS AND FINANCIAL SERVICE PROVIDERS

Payments made through the Platform, including token purchases, listing fees, promotional services, or other paid features, may be processed through authorized third-party payment gateways and financial technology providers.

To facilitate such transactions, Stayzee may share limited information including:

  • Order identifiers;
  • Transaction amounts;
  • Merchant reference numbers;
  • Payment status;
  • Billing information where required;
  • Device information associated with the transaction;
  • Fraud prevention indicators;
  • Applicable tax calculations;
  • and other information reasonably necessary to process authorized payments.

Payment authentication credentials such as complete debit card numbers, credit card numbers, CVV values, UPI PINs, internet banking passwords, ATM PINs, or similar confidential credentials are processed directly by payment service providers operating under independent regulatory frameworks. Stayzee does not intentionally collect or permanently store such sensitive authentication information.

Users acknowledge that payment service providers operate under their own privacy policies, contractual terms, security standards, and regulatory obligations, which are independent of Stayzee.


33. LEGAL DISCLOSURES AND GOVERNMENT AUTHORITIES

Stayzee may disclose Personal Information where we reasonably believe such disclosure is necessary or appropriate to:

  • Comply with applicable laws or regulations;
  • Respond to lawful governmental requests;
  • Comply with judicial orders, warrants, summonses, or subpoenas;
  • Cooperate with law enforcement agencies;
  • Protect public safety;
  • Prevent or investigate criminal activity;
  • Enforce our contractual rights;
  • Defend legal claims;
  • Establish or exercise legal rights;
  • Prevent fraud or cybercrime;
  • Protect the rights, property, or safety of Stayzee, its users, employees, contractors, or the general public;
  • Comply with statutory reporting obligations;
  • or satisfy any other legally binding requirement.

Where legally permissible and operationally appropriate, Stayzee may notify affected users before disclosing Personal Information to governmental authorities. However, Stayzee reserves the right to withhold such notification where prohibited by law, court order, or governmental directive, or where providing notice could interfere with an investigation or compromise public safety.


34. BUSINESS TRANSFERS, MERGERS, AND CORPORATE RESTRUCTURING

As Stayzee continues to develop its business, certain corporate transactions may involve the transfer of business assets, including databases and operational records.

Accordingly, Personal Information may be disclosed or transferred in connection with:

  • Mergers;
  • Acquisitions;
  • Strategic investments;
  • Venture capital funding;
  • Joint ventures;
  • Corporate restructuring;
  • Asset sales;
  • Business transfers;
  • Insolvency proceedings;
  • Amalgamations;
  • Demergers;
  • Corporate reorganizations;
  • or similar commercial transactions.

Such disclosures may be made to prospective investors, lenders, financial institutions, legal advisors, auditors, consultants, acquiring entities, or successor organizations, provided such disclosure is reasonably necessary for evaluating or completing the proposed transaction.

In the event that Stayzee undergoes a change in ownership or control, the successor entity shall generally continue processing Personal Information in a manner substantially consistent with this Privacy Policy unless users are notified otherwise or applicable law requires different treatment.


35. AGGREGATED, ANONYMIZED, AND DE-IDENTIFIED INFORMATION

Stayzee may generate statistical, aggregated, anonymized, pseudonymized, or otherwise de-identified datasets derived from information collected through the Platform.

Such datasets may be used for purposes including:

  • Market research;
  • Accommodation demand forecasting;
  • Product development;
  • Business intelligence;
  • Academic or industry research;
  • Infrastructure planning;
  • Performance benchmarking;
  • Investor reporting;
  • Operational analytics;
  • Trend analysis;
  • Service improvement;
  • and other lawful business purposes.

Where Personal Information has been irreversibly anonymized or de-identified such that it can no longer reasonably identify an individual, such information may no longer constitute Personal Information under applicable law.


36. INTERNATIONAL DATA TRANSFERS

Stayzee primarily endeavors to store and process Personal Information using infrastructure located within India. However, certain service providers engaged by Stayzee may maintain servers, backup systems, support operations, or technical infrastructure located outside India.

Accordingly, Personal Information may be transferred, transmitted, processed, cached, mirrored, or temporarily stored in jurisdictions outside the country in which it was originally collected.

Where cross-border processing occurs, Stayzee shall endeavor to implement commercially reasonable contractual, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction.

Where Personal Information is transferred outside India, Stayzee shall ensure that such transfer is made only to countries or entities that provide an adequate level of protection, or under a contract that incorporates appropriate safeguards, as required under the Digital Personal Data Protection Act, 2023 and any rules framed thereunder.


37. INFORMATION SECURITY

The security of Personal Information is an important operational priority for Stayzee. We implement commercially reasonable administrative, technical, physical, and organizational safeguards designed to protect Personal Information against unauthorized access, unlawful disclosure, accidental loss, destruction, alteration, misuse, theft, corruption, or other reasonably foreseeable security risks.

Security measures implemented by Stayzee may include, where appropriate:

  • Encrypted communications using secure protocols;
  • Password hashing;
  • Role-based access controls;
  • Authentication and authorization systems;
  • Network firewalls;
  • Intrusion detection and monitoring systems;
  • Secure cloud infrastructure;
  • Database encryption where appropriate;
  • Activity logging;
  • Regular software updates;
  • Malware protection;
  • Vulnerability assessments;
  • Backup procedures;
  • Disaster recovery planning;
  • Access control policies;
  • Employee confidentiality obligations;
  • Security awareness training;
  • Rate limiting;
  • Multi-layered security architecture;
  • and periodic review of security practices.

Despite these measures, no method of internet transmission, cloud storage, electronic communication, or digital security can guarantee absolute protection. Accordingly, Stayzee cannot warrant that unauthorized third parties will never successfully circumvent our security measures.

Users acknowledge and accept the inherent risks associated with electronic communications and internet-based services.


38. DATA RETENTION

Stayzee retains Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce contractual rights, maintain business records, prevent fraud, protect Platform security, and safeguard legitimate business interests.

Retention periods vary depending upon the nature of the information, the purpose for which it was collected, statutory requirements, ongoing legal proceedings, operational necessity, and technical considerations.

For example:

  • Account information may be retained while an account remains active and for a reasonable period thereafter;
  • Financial records may be retained for accounting, taxation, and audit purposes;
  • Customer support communications may be preserved to improve service quality and resolve future disputes;
  • Security logs may be retained for cybersecurity monitoring and forensic investigations;
  • Verification records may be maintained to investigate fraudulent listings or respond to legal inquiries;
  • Backup copies may remain in encrypted archival systems until automatically overwritten according to established retention schedules.

Where Personal Information is no longer required, Stayzee shall, subject to applicable law and technical feasibility, securely delete, anonymize, aggregate, or otherwise dispose of such information using commercially reasonable methods.

39. USER RIGHTS AND CONTROL OVER PERSONAL INFORMATION

Stayzee believes that users should retain reasonable control over their Personal Information. Subject to applicable law, users may exercise certain rights regarding the information maintained by Stayzee.

Depending upon applicable legal requirements, users may have the right to:

  • Request confirmation regarding whether Stayzee processes their Personal Information;
  • Request access to Personal Information maintained by Stayzee;
  • Request correction of inaccurate, incomplete, outdated, or misleading information;
  • Request updating of profile information;
  • Request deletion of Personal Information where legally permissible;
  • Request restriction of certain categories of processing;
  • Object to specific processing activities where permitted by law;
  • Withdraw consent previously provided for particular processing activities;
  • Request clarification regarding how their Personal Information is processed;
  • Obtain copies of information voluntarily submitted by them where technically feasible;
  • Lodge complaints concerning privacy practices; and
  • Exercise any additional rights recognized under applicable law.

You have the following rights under the Digital Personal Data Protection Act, 2023:

  • Right to access information about your Personal Information (Section 11)
  • Right to correction and erasure (Section 12)
  • Right of grievance redressal (Section 13)
  • Right to nominate another person to exercise rights on your behalf (Section 14)

The exercise of these rights may be subject to reasonable identity verification procedures intended to prevent fraudulent or unauthorized requests.

Stayzee reserves the right to refuse requests that are manifestly unfounded, repetitive, technically impracticable, inconsistent with applicable law, likely to infringe the rights of another individual, or otherwise unreasonable.

Nothing contained within this Privacy Policy shall diminish any mandatory statutory rights available to users under applicable law.

To exercise any of these rights, please write to [email protected]. We will respond within the timelines prescribed under the DPDP Act and Rules. You also have the right to lodge a complaint with the Data Protection Board of India

40. CORRECTION, MODIFICATION, AND ACCOUNT MANAGEMENT

Users are responsible for ensuring that the information associated with their Stayzee account remains accurate, complete, and current.

Where functionality is available, users may modify certain categories of Personal Information directly through their account settings. Where self-service modifications are unavailable, users may contact Stayzee through the official support channels to request corrections or updates.

Stayzee may require reasonable documentation or verification before implementing requested changes, particularly where such changes relate to identity information, payment records, ownership verification, or other information affecting Platform security or the rights of third parties.

Failure to maintain accurate information may adversely affect verification processes, communication with landlords, customer support, payment processing, and access to certain Platform features.


41. ACCOUNT DEACTIVATION AND DELETION

Users may request the deactivation or deletion of their Stayzee account at any time by following the procedures made available through the Platform or by contacting our support team.

Upon receipt of a valid request, Stayzee may:

  • Deactivate user access;
  • Remove publicly visible profile information;
  • Disable authentication credentials;
  • Restrict future login attempts;
  • Delete information from active production systems where appropriate;
  • Archive records required for legal compliance;
  • Retain transaction histories required for accounting or taxation purposes;
  • Preserve information relevant to ongoing disputes, fraud investigations, or legal proceedings; and
  • Securely dispose of information no longer required for lawful business purposes.

Users acknowledge that account deletion shall not automatically result in:

  • Refund of completed payments;
  • Reversal of token purchases or redemptions;
  • Deletion of communications retained by other users;
  • Removal of publicly posted reviews where retention is justified;
  • Deletion of information contained within encrypted backups until normal backup rotation occurs;
  • or elimination of information required to satisfy legal or regulatory obligations.

Stayzee reserves the right to retain certain categories of information for as long as necessary to comply with applicable law, enforce contractual rights, resolve disputes, prevent fraud, and protect the integrity of the Platform.


42. CHILDREN'S PRIVACY

The Stayzee Platform is intended primarily for college students, universities, educational institutions, landlords, hostel operators, and other individuals involved in lawful accommodation-related activities. It is not designed for use by children who are not legally permitted to independently provide Personal Information under applicable law.

Stayzee does not knowingly collect Personal Information from children in violation of applicable legal requirements.

If Stayzee becomes aware that Personal Information has been collected from a child without the legally required authorization, Stayzee may, subject to applicable law:

  • Suspend or restrict the associated account;
  • Request parental or guardian authorization where legally permissible;
  • Remove or anonymize Personal Information from active systems where feasible;
  • Delete the affected account;
  • Preserve limited records where legally required; and
  • Take any additional measures reasonably necessary to comply with applicable law.

Parents or legal guardians who believe that Personal Information relating to a child has been submitted through the Platform without appropriate authorization are encouraged to contact Stayzee promptly.


43. THIRD-PARTY WEBSITES AND EXTERNAL SERVICES

The Platform may contain hyperlinks, embedded content, payment gateways, mapping services, social media integrations, software development kits (SDKs), plugins, or references to third-party websites and applications.

These services operate independently of Stayzee and are governed by their own privacy policies, contractual terms, and security practices.

Accordingly, Stayzee:

  • Does not own or control third-party websites;
  • Does not guarantee the availability or reliability of third-party services;
  • Is not responsible for the privacy practices of third parties;
  • Does not warrant the accuracy of content hosted by external platforms; and
  • Encourages users to review the applicable privacy policies and terms before submitting Personal Information to any third-party service.

The inclusion of a hyperlink or integration does not constitute an endorsement, recommendation, partnership, or approval of the relevant third-party service unless expressly stated.


44. PLATFORM DISCLAIMERS

Stayzee is a technology platform intended to facilitate the discovery of accommodation and communication between independent users. While we strive to improve the quality and reliability of information presented on the Platform, Stayzee cannot guarantee the accuracy, completeness, legality, reliability, or continued availability of every listing, property, photograph, review, or representation made by independent users.

Accordingly, users expressly acknowledge that:

  • Property information is primarily supplied by landlords or their authorized representatives;
  • Property availability may change without prior notice;
  • Rental prices, amenities, photographs, occupancy status, and facilities may change over time;
  • Verification conducted by Stayzee does not constitute legal certification, engineering inspection, structural approval, title verification, or governmental authorization;
  • Users remain solely responsible for independently inspecting properties and evaluating their suitability before entering into any rental arrangement;
  • Stayzee is not a landlord, property owner, broker, property manager, or party to any tenancy agreement unless expressly stated otherwise in writing.

All decisions relating to accommodation, payments, security deposits, lease execution, possession, cancellation, or disputes remain exclusively between the relevant Student User and the Property Owner.


45. LIMITATION OF LIABILITY

To the fullest extent permitted by applicable law, Stayzee, its founders, directors, officers, employees, consultants, contractors, affiliates, licensors, and service providers shall not be liable for any direct, indirect, incidental, consequential, exemplary, punitive, special, or economic damages arising out of or relating to:

  • The use or inability to use the Platform;
  • Property listings published by independent users;
  • Misrepresentations made by landlords or students;
  • Rental disputes;
  • Security deposits;
  • Property damage;
  • Personal injury;
  • Theft or criminal acts committed by third parties;
  • Delays or interruptions in Platform availability;
  • Technical failures;
  • Unauthorized account access resulting from user negligence;
  • Data loss caused by circumstances beyond reasonable control;
  • Errors in third-party services;
  • Force majeure events;
  • or any decision made by a user based upon information available through the Platform.

Nothing contained within this Privacy Policy shall exclude or limit liability where such exclusion or limitation is prohibited by applicable law.


46. CHANGES TO THIS PRIVACY POLICY

Technology, legal requirements, operational practices, and business models evolve over time. Accordingly, Stayzee reserves the right to revise, modify, update, replace, or supplement this Privacy Policy whenever reasonably necessary.

Updated versions shall become effective upon publication through the Platform unless a different effective date is expressly specified.

Where changes materially affect the processing of Personal Information, Stayzee may, where required by applicable law, provide users with additional notice through email, Platform notifications, or other reasonable communication methods.

Users are encouraged to review this Privacy Policy periodically to remain informed regarding our information handling practices.

Continued use of the Platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated version, except where applicable law requires additional consent.


47. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of India, without regard to conflict of law principles.

Subject to any mandatory dispute resolution procedures required by applicable law, the courts having jurisdiction over the location of Stayzee's registered office shall possess exclusive jurisdiction to adjudicate disputes arising out of or relating to this Privacy Policy.

Nothing contained herein shall restrict Stayzee from seeking interim, equitable, or injunctive relief before any court of competent jurisdiction where necessary to protect its legal rights, intellectual property, confidential information, or Platform security.


48. CONTACT INFORMATION

Users who have questions, concerns, requests, or complaints relating to this Privacy Policy or the processing of their Personal Information may contact Stayzee through the official communication channels published on the Platform.

Privacy-related inquiries may include, without limitation:

  • Requests for access to Personal Information;
  • Requests for correction or deletion;
  • Withdrawal of consent where applicable;
  • Reporting suspected security incidents;
  • Questions regarding data processing practices;
  • Complaints relating to privacy;
  • Reporting fraudulent listings or misuse of personal information; or
  • Any other matter relating to this Privacy Policy.

Stayzee shall endeavor to acknowledge and respond to legitimate privacy inquiries within a commercially reasonable period, subject to verification requirements, operational feasibility, and applicable legal obligations.


49. FINAL ACKNOWLEDGEMENT

By accessing, registering on, or otherwise using the Stayzee Platform, you acknowledge that you have carefully read, understood, and agreed to this Privacy Policy. You further acknowledge that you understand how your Personal Information may be collected, used, disclosed, retained, protected, and otherwise processed in accordance with the provisions described herein.

This Privacy Policy should be read together with the Stayzee Terms and Conditions, Refund Policy, Cookie Policy (if applicable), Community Guidelines, and any additional legal documents published by Stayzee from time to time.

If you do not agree with this Privacy Policy or any future amendments, you should immediately discontinue use of the Platform and refrain from submitting any further Personal Information through Stayzee.

The continued use of the Platform constitutes your acceptance of this Privacy Policy, as amended from time to time, to the fullest extent permitted by applicable law.

“This Privacy Policy should be read together with the Stayzee Terms and Conditions and Refund Policy. In case of any conflict specifically relating to the processing of personal data, this Privacy Policy shall prevail to the extent permitted by the Digital Personal Data Protection Act, 2023.”