Privacy Policy

1. Who We Are

Concigo app is developed and operated by Concigo Tech pvt ltd.

For any privacy-related questions, contact us at 📧 contact@concigo.in.

2. Information We Collect

2.1 Information You Provide

To create a Concigo account, we require your mobile phone number, which is used for account creation and OTP-based login and verification. This is the only piece of information mandatory to use the App.

Beyond this, you may choose to share certain optional details to enhance your experience. You may provide your name, used to personalize your guest profile and bookings, and your email address, used for booking confirmations, communication, and support. You may also share your state and city, which help us localize and tailor services relevant to you, and identity documents (such as a government-issued ID), which may be used for identity verification where required by the hotel for check-in or specific services.

When you make a paid booking, we also collect payment information necessary to process payments for room upgrades, service bookings, and orders; how this is handled is described further in Section 4.2.

We do not require identity documents or personal details beyond your phone number to use core features of the App. You choose whether to share optional information.

2.2 Information Collected Automatically

• Device information: device model, operating system, unique device identifiers, app version.
• Usage data: features used, session duration, crash logs, and interaction data, used to maintain and improve the App.

2.3 Information from Third Parties

We do not purchase or receive personal data about you from data brokers or advertising networks. Information may be shared with us by the hotel property you are staying at, where relevant to fulfilling your booking or service request (e.g., room number, stay dates).

3. How We Use Your Information

We use the information we collect to:

• Create and manage your Concigo account
• Authenticate you via OTP (One-Time Password) sent to your mobile number
• Enable hotel services: early check-in, late check-out, room upgrades, service bookings, online ordering, and check-out
• Process payments for paid services
• Verify identity where required by a hotel for regulatory or check-in purposes
• Communicate booking confirmations, updates, and support responses
• Maintain the security, integrity, and functionality of the App
• Comply with applicable legal obligations

We do not use your personal data for third-party advertising, and we do not sell your personal data.

4. Third-Party Services We Use

We share data with the following categories of service providers, solely to operate the App:

4.1 Supabase (Authentication & Database)

Concigo uses Supabase for user authentication and secure storage of account and booking data. Supabase may process and store data on servers located outside India, depending on the hosting region configured for our project. Supabase processes data under its own security and privacy practices; you can review Supabase's policies at supabase.com/privacy.

4.2 Payment Gateway (e.g., Razorpay / Stripe)

When you make a payment for a service, upgrade, or booking, your payment is processed by a third-party payment gateway. Concigo does not collect or store your full card number, CVV, or banking credentials — these are handled directly and securely by the payment gateway in compliance with PCI-DSS standards. We only receive confirmation of payment status and a transaction reference.

We do not use any advertising, analytics, or tracking SDKs beyond what is described above. If this changes, we will update this Policy accordingly.

5. Data Storage, Security & Retention

• Your data is stored on Supabase's secure cloud infrastructure, with industry-standard encryption in transit (HTTPS/TLS) and at rest.
• Access to your data is restricted to authorized personnel who need it to operate the App.
• We retain your personal data for as long as your account is active, or as needed to provide services, resolve disputes, and comply with legal obligations (e.g., financial/transaction records as required under Indian law).
• You may request deletion of your account and associated data at any time (see Section 7).

No method of electronic storage or transmission is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

6. Sharing of Information

We share your information only in the following circumstances:

• With the hotel you are booking with, to the extent necessary to fulfill your requested service (e.g., name, room number, service request details, and identity documents if voluntarily submitted for verification).
• With service providers (Supabase, payment gateway) strictly to operate the App, as described in Section 4.
• For legal reasons, if required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Concigo, our users, or others.
• In a business transfer, such as a merger, acquisition, or sale of assets, where user information may be transferred as part of that transaction, subject to this Policy or a comparable one.

We do not sell your personal information to third parties.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated personal data
• Withdraw consent for optional data (e.g., identity documents) at any time
• Export your data in a portable format

To exercise any of these rights, contact us at contact@concigo.in. We will respond within a reasonable timeframe and in accordance with applicable law, including the Digital Personal Data Protection Act, 2023 (India), where applicable.

7.1 How to Delete Your Account

You can delete your Concigo account directly within the App by following these steps:

• Step 1 → Go to Profile Settings in the menu.
• Step 2 → Go to Account Settings.
• Step 3 → Click on Delete Account.

Once you complete this process, all your personal data will be permanently removed from our database, except for your mobile number, which we retain to prevent misuse of the OTP-based authentication system and to comply with our record-keeping obligations.

8. Children's Privacy

Concigo is intended for use by hotel guests and is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Grievance Officer (India)

In accordance with the Information Technology Act, 2000, and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Concigo is:

Name: Shivangi Kandpal
Email: shivangi@concigo.in
Address: 885 GF, Sector 3, Rohtak, Haryana, India

You may reach out to the Grievance Officer with any complaints or concerns regarding your personal data.

10. International Data Transfers

As Supabase's infrastructure may be hosted outside India, your data may be transferred to, stored, and processed in a country other than your country of residence. We take steps to ensure such transfers are conducted in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes via the App or by updating the "Last Updated" date above. Continued use of Concigo after changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

📧 contact@concigo.in
📍 885 GF, Sector 3, Rohtak, Haryana, India