Privacy Policy
Effective Date: January 1, 2025 · Last Updated: March 2026
SSPRODIGI ("we," "us," or "our") is committed to protecting the privacy of our customers and their end users. This Privacy Policy explains how we collect, use, store, and share information when you use the SSPRODIGI Hotel Management SaaS platform ("Service").
1. Data We Collect
We collect the following types of data:
- Account Information: Hotel/resort name, contact email, billing information, and administrator login credentials.
- Hotel Operational Data: Guest names, contact numbers, email addresses, booking details, room information, staff records, and complaint records that you enter into the Service.
- Usage Data: Log data including IP addresses, browser type, pages visited, and timestamps when you access the Service.
- Technical Data: Cookies and session data necessary for authentication and system functionality.
2. How We Use Your Data
- To provide and maintain the Service as described in our Terms of Service.
- To authenticate users and protect account security.
- To send important service notifications (subscription renewals, security alerts).
- To improve the Service and diagnose technical issues.
- To comply with legal obligations.
- To enforce our Terms of Service.
We do not use your guests' personal data for marketing purposes or sell it to third parties.
3. Data Storage and Security
- All data is stored on secure servers with encrypted connections (HTTPS/SSL).
- Passwords are hashed using bcrypt — we cannot access your plain-text password.
- Each hotel's data is isolated from other hotels using tenant-specific database scoping.
- We implement regular security updates and access controls.
- Backups are performed regularly to prevent data loss.
4. Data Retention
- Active subscription data is retained for the duration of your subscription.
- Upon cancellation or expiry, data is retained for 30 days before permanent deletion.
- You may request immediate deletion of your data by contacting us.
- Log data is retained for up to 90 days for security and diagnostic purposes.
5. Third Parties
We do not sell, trade, or rent your personal data to third parties. We may share data with:
- Hosting Providers: Our server infrastructure providers (e.g., Hostinger) who process data on our behalf under data processing agreements.
- Payment Processors: If applicable, payment processing services who handle billing securely.
- Legal Authorities: When required by law, court order, or governmental authority.
6. Cookies
- We use session cookies for authentication — these are required for the Service to function.
- Session cookies are set with HttpOnly and SameSite flags for security.
- We do not use advertising or tracking cookies.
7. Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data (subject to legal retention requirements).
- Portability: Request an export of your operational data.
- Objection: Object to certain processing of your data.
To exercise any of these rights, contact us at privacy@ssprodigi.com.
8. Data of Hotel Guests
When you use our Service to manage guest bookings and records, you are the data controller for your guests' personal information. SSPRODIGI acts as a data processor on your behalf. You are responsible for:
- Obtaining appropriate consent from guests to collect and process their data.
- Maintaining your own privacy policy for hotel guests.
- Complying with applicable data protection laws (GDPR, CCPA, etc.) in your jurisdiction.
9. Children's Privacy
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the Service. Continued use of the Service after changes indicates your acceptance of the updated policy.
11. Contact Us
For privacy-related questions or to exercise your rights, contact us at: