Get Up To 10% Off On Your First Farmhouse Booking - Use Code WELCOME10

Privacy Policy

Where Every Stay Becomes a Story

At Almond Stay (managed under the legal entity Luxora Venture, "we", "our", or "us"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit or use https://almondstay.com, our automated admin tools, listing panels, WhatsApp Business API systems, or customer support channels.

By accessing or using the platform, you agree to the terms of this Privacy Policy.

Platform Operator: Almond Stay operates an online marketplace that enables guests to discover and book premium properties, and hosts/owners to list and manage properties.
Legal Entity: Luxora Venture
Registered Address: 1ST Floor, 114, Shivalik, Bhumipark Society, Dabholi, Surat, Gujarat 395004, India
Support Contact: contact@almondstay.com | +91 99796 55151

A. Information You Provide Directly:

User Profiles: Full name, email address, mobile number, and billing/communication address.
Identity Verification: Government identification details (Aadhar Card, Passport, or Driving License) uploaded digitally prior to check-in for mandatory local compliance.
Booking & Listing Metrics: Stay preferences, guest count, special requests, property details submitted by hosts, and bank account/payout details of owners.
Communication Logs: Interactions sent through emails, customer chat support, and digital media (time-stamped photos/videos) uploaded to our automated WhatsApp Evidence Box for turnover audits or damage claims.
Co-Traveler Data Representation: When a User provides identity verification metrics, contact logs, or stay details for accompanying guests or secondary travelers within a single reservation, the primary User represents and warrants that they have obtained explicit consent from each co-traveler to disclose their personal data to the Company and authorize its sharing with the respective Host for security and check-in clearance.
Customer Support Interaction Logs: If a User or Partner communicates with our service helpdesks, operational teams, or via official email channels with explicit queries or complaints, the Platform is authorized to collect and retain their name, email routing information, contact parameters, and the nature of the inquiry strictly to resolve the support ticket and continuously improve platform usability.

B. Information Collected Automatically:

Device Telemetry: IP address, device type, browser type, operating system, and referral sources.
Cookie Logs: Clickstream data, interaction time, and cookie tracking identifiers.
Automatic Session Logging & IP Metadata: Each time a user or partner accesses the Platform, standard non-identifiable session data is automatically recorded by our cloud infrastructure. This system log captures vital network and tracking parameters, including:
The Internet Protocol (IP) address, operating system architecture, and type of browser software being used.
Real-time user behavioral metrics, frequency of visits, browsing trajectories, interaction patterns, and exact time durations for which a User remains logged on.
Purpose of Analytics & Diagnostic Data: Almond Stay collects and evaluates this system metadata strictly to analyze consumer choices, trace holiday search preferences, diagnose structural problems on our hosting servers, and ensure the high-performance administration of our IT networks.
Personal Identity Protection & ISP Discovery: The mathematical data gathered during this automatic log generation cannot identify any User personally. However, the User acknowledges that the platform retains the operational capacity to determine their technical Internet Service Provider (ISP) and the approximate geographic location of the User's point of connectivity through these session logs strictly to safeguard the portal against unauthorized data scraping, automated bots, and malicious cyber activities.

C. Booking and Transaction Information:

History Metrics: Property booked/listed, check-in/check-out dates, total booking values, payment statuses, and refund/cancellation histories.
Expeditious Checkout Processing: To facilitate seamless, rapid transaction flow during subsequent bookings, the platform utilizes secured, tokenized, and scrambled payment parameters (including cardholder indicator strings and encrypted gateway preferences allowed to be cached by the user). This encrypted overview is prepopulated at the final step strictly to enable users to complete booking payouts expeditiously without repetitive data input.

Core Account Operations: We process your personal and property data to seamlessly manage accounts, process instant bookings/listings, verify user authenticity, and coordinate automated payouts, refunds, and cross-property offsets.
Premium Compliance Framework: Data is used to maintain premium hospitality standards via surprise quality audits, prevent fraud or security bypasses, enforce house rules (including the enforcement of the Gujarat State Liquor Ban or age restrictions), and comply with lawful statutory or police requirements.
Digital Marketing Surveys & Contests Framework: Almond Stay may periodically conduct optional online/offline user surveys, promotional contests, or brand loyalty programs to enhance customer experiences. By participating, the User explicitly agrees that their anonymized feedback data may be used for marketing analytics. In the event that a User wins a promotional reward, contest prize, or gift voucher, the Company is authorized to share the required shipping and profile verification data with the third-party logistics or fulfillment vendor responsible for delivering the prize.
Automated Lifecycle Notifications: The Company is explicitly authorized to analyze profile parameters (such as birth dates or registration anniversaries voluntarily shared by the user) to generate and dispatch personalized loyalty rewards, exclusive stay credits, or special celebratory discount vouchers through automated API streams.
Periodic Marketing Updates & Opt-Out Rights: Registered Users will periodically receive customized digital newsletters, location-specific villa discount alerts, updates on premium hospitality services, and selective promotional deals. Users maintain the absolute freedom to opt out of these promotional email distributions or lifecycle marketing campaigns at any stage by utilizing the direct "Unsubscribe" mechanism embedded within the communication channels or by directing an opt-out mandate to our support team.
E-Mail Circulars & Direct Market Operations: The Platform is authorized to deploy periodic electronic notifications and updates regarding premium villa sales, regional price discounts, new hospitality service rollouts, and custom noteworthy travel perks. Users who do not wish to remain registered within this lifecycle marketing loop can instantly terminate these specific broadcasts by clicking the "Unsubscribe" routing key present inside each electronic communication.
User Generated Content (UGC) & Public Profiles Framework: The Platform provides interactive features allowing Users to publish public ratings, text or video-based reviews, community poll answers, and property photographs. By uploading any form of UGC, the User acknowledges that a generalized public profile will be generated, making metrics such as the total number of completed stays, written testimonials, and submitted photographs accessible to other platform users. Almond Stay maintains the right to syndicate, display, or feature these user ratings, text, or video assets across external hospitality networks and social channels for quality indexing and brand enhancement.

A. Strict Data Sovereignty Rule:

Database Ownership: Any customer or guest database generated through the Almond Stay portal belongs exclusively to the Company. Hosts, caretakers, or on-site staff are strictly forbidden from extracting, scraping, or utilizing guest personal data for their private marketing or independent databases. Unauthorized usage constitutes a material contract breach and will lead to direct criminal prosecution under the Data Protection laws of India.
Proprietary Aggregated Data & Research Optimization: Almond Stay routinely transforms user activity parameters and clickstream trajectories into an anonymized, collective, or aggregated format to conduct statistical research, measure visitor demographics, evaluate holiday trends, and optimize portal functionality. The Company maintains absolute, unshared proprietary ownership over all such aggregated and non-identifiable datasets. We reserve the sovereign right to utilize, share, or license this anonymous statistical metadata with market researchers, brand advertisers, property developers, and data hosting platforms for legitimate commercial or operational analytical purposes without any financial compensation or royalty liabilities toward the User.

B. Lawful Sharing Channels:

Between Guests and Hosts: Booking parameters and primary contact details are shared to facilitate check-in and property coordination.
Service Providers: Data is shared securely with payment gateways, automated communication partners, cloud servers, and identity verification tools.
Legal and Enforcement Authorities: Personal data, government IDs, and automated chat logs/evidence will be immediately shared with police or legal authorities in case of any investigation regarding illegal activities, gambling (Juha), or serious statutory incidents on the premises.
Corporate M&A Data Transfer Rights: In the event that Almond Stay or its parent firm Luxora Venture undergoes corporate restructuring, business asset expansion, mergers, dynamic acquisitions, or structural assignment of ownership to an external entity, the entire user and host database—including transaction metrics and identity documentation history—will naturally be transferred to the acquiring or successor corporate entity as part of standard business survival protocol.
Extended Regulatory & Audit Disclosures: In addition to standard law enforcement channels, the Company reserves the absolute right to disclose filtered Personal Information and server metadata without the User’s prior knowledge or explicit consent if required to do so for regulatory compliance, internal corporate audits, system infrastructure security reinforcement, or to enforce and protect the legal rights, safety, and property of Almond Stay, its parent firm Luxora Venture, and its associated directors or employees. The User agrees that the platform shall bear zero liability for any incidental damages arising from such statutory disclosures or data preservation actions.

ADDITIONAL SUPPLIER LIABILITY & DATA PROTECTION CLAUSE

Authorized Sharing with Hosts & Property Alliances: By executing a reservation transaction on the Platform, the User explicitly authorizes the Company to share primary communication logs, guest details, and booking parameters with the respective Property Owners, Hosts, and on-site suppliers responsible for executing the check-in and stay fulfillment.
Independent Data Controller Exemption: While Almond Stay strictly forbids Hosts or external partners from utilizing user data for any purpose other than operational stay coordination, the User explicitly acknowledges that individual Hosts and property suppliers process personal information as independent data controllers. Consequently, the real-time privacy practices, physical security workflows, and internal data handling protocols of the respective Host are entirely beyond the purview, structural monitoring, and legal liability of Almond Stay, and the platform cannot be held accountable for any independent partner-end lapses. Users are advised to review specific property profiles and rules before stay finalization.
No-Sale & No-Rent Covenant: The Company under no circumstances sells, leases, or rents individual consumer databases, registered user profiles, or personal phone/email metrics to external third parties or mass-marketing brokers. Filtered behavioral data is shared strictly under confidential bounds with our authorized payment engines, cloud servers, or business referral tools to disburse loyalty benefits based on booking history.
Intra-Firm Data Sharing & Entity Synergy: To improve service efficiency, personalize dashboard suggestions, and resolve cross-platform user tickets, the Company reserves the structural right to share filtered personal information and transactional metrics under strictly controlled, secure circumstances with our corporate affiliates, associate entities, and sister concerns under the parent banner of Luxora Ventures. This secure synchronization allows us to provide you with exclusive updates regarding new luxury villa launches, premium stay tiers, and hospitality benefits aligned with your booking preferences.
Corporate M&A and Restructuring Disclosures: In the event that Almond Stay or its parent firm Luxora Ventures undergoes structural business changes—including but not limited to corporate restructuring, venture expansion, dynamic mergers, asset acquisition, or the strategic sale/assignment of a specific subsidiary or operational business unit to an external partner—the entire user and host database (comprising identity records, transaction histories, and digital tracking data) will naturally be transferred to the successor or acquiring entity as an essential part of the business asset transition. The acquiring party shall remain bound to honor the security boundaries outlined in this Privacy Policy.
Strategic Alliance & Ancillary Services Sharing: The Company may share filtered, non-sensitive personal parameters with verified corporate affiliates, luxury hospitality partners, or business alliance networks. This allows them to contact the User with specialized, handpicked offers, curated co-branded privileges, travel insurance protections, or premium ancillary services specifically designed to elevate the Almond Stay guest experience. Any ecosystem service explicitly chosen and availed by the User through these third-party alliances shall be strictly governed by the distinct privacy policy and terms of that respective service supplier.

C. External Hyperlinks Disclaimer:

Third-Party Routing Disclaimer: The Platform may contain active digital hyperlinks, APIs, or interactive portals directing to third-party partners, payment processors, or external service suppliers. This Privacy Policy does not apply to external entities. The data protection protocols of our business partners, sponsors, or integrated external tools may differ materially from this policy. Users are strongly advised to independently review the privacy statements of any third-party interface channels with whom they interact.
B2C Usage Restriction: Almond Stay operates strictly as a B2C platform for bona fide leisure users. Any unauthorized extraction of guest or host database parameters by third-party consolidators, corporate travel agents, or unauthorized aggregators for commercial resale or lead-poaching is strictly banned and constitutes an electronic breach under data sovereignty laws.

D. COOKIES & ADVANCED PIXEL TRACKING FRAMEWORK

Usage & Personalization: Almond Stay utilizes industry-standard cookies and small digital text identifiers stored on your device's browser to personalize your navigation experience, save authentication states, and ensure dynamic interface loading. Cookies allow the user to easily log in to their personalized dashboard without typing their user credentials repeatedly, needing only their designated password for verification.
Third-Party Analytics & Marketing Optimization: The platform uses cookie trackers and anonymous pixel tags to measure the operational effectiveness of our performance marketing campaigns across external social platforms. These technologies capture aggregated statistics regarding destinations of interest and user navigation trajectories to display tailored, relevant luxury property recommendations. All data captured via pixel tags remains completely anonymous and does not link online structural actions directly to a user's personal identity.
User Autonomy & Blocking Rights: Most modern web browsers automatically accept cookies by default. Users maintain the absolute right to modify their web browser configurations or utilize specialized software frameworks to block, decline, or control cookie placements. However, the User explicitly acknowledges that blocking Almond Stay cookies may disable certain premium portal components and hinder a seamless, expedited travel booking experience.

Retention Boundaries: We retain personal data for as long as necessary to fulfill business services, process bank payouts, comply with tax/statutory regulations, or settle property damage disputes.
Data Purging and Secure Anonymization: Personal information is preserved on our secure servers only for the duration reasonably necessary to execute transactional services or satisfy tax, legal, regulatory, and accounting mandates. Once the statutory retention lifecycle expires, the Company guarantees that such personal markers are either permanently and securely deleted from the database or transformed into a completely anonymized, aggregated statistical structure that can no longer trace back to or identify any individual user.
Forfeiture Records: In cases where a guest or host is evicted or blocked due to direct-booking cheating, drug abuse, or illegal activities, their identification history and behavioral logs will be retained permanently in our database to prevent future security risks.
Security Responsibility: While we use top-tier industrial and administrative safeguards to protect your cloud data, you are strictly responsible for maintaining the confidential status of your Admin Panel or User login credentials.
User Rights to Rectification & Deletion: Users maintain the right to access their personal profiles directly through the Almond Stay dashboard to modify, update, or correct their personal data at any time. If a user chooses to permanently withdraw their consent for data processing or requests account erasure, they may submit a formal request via email to contact@almondstay.com. Almond Stay will execute the deletion within statutory timelines, provided no active booking disputes, outstanding payouts, or legal claims are pending against that specific user profile.
Social Auth Synchronization: When a User logs in or registers using linked verified social media channels (such as Google or Facebook auth keys), the platform is authorized to synchronize profile parameters like verified name and email indicators to auto-populate fields for a seamless booking setup.
Operational Impact of Consent Withdrawal: Users maintain the statutory right to withdraw their data processing consent at any stage. However, if such personal data or identification validation is operationally critical to fulfill an active booking, verify police compliance, or coordinate with the Host, the withdrawal of consent will severely inhibit our ability to serve you. In such circumstances, Almond Stay reserves the absolute sovereign right to immediately refuse or cancel the associated active reservations, apply standard cancellation policy deductions, or permanently block access to the Platform to mitigate security liabilities.
Advanced Encryption Protocols: All digital communications, personal data uploads, and financial transaction metadata transmitted across the Platform are strictly encrypted and scrambled utilizing industry-standard TLS (Transport Layer Security) encryption infrastructure. Once data enters our cloud ecosystem, stringent backend security measures and firewalls protect it from alteration, loss, or unauthorized breach.
Server Shield Vulnerability Clause: While the Company adopts top-tier safeguards, the absolute security of end-to-end cloud infrastructure cannot be mathematically guaranteed against advanced external cyber risks. All sensitive data transmissions on the website are secured using TLS encryption. However, while the Company adopts industry-standard encryption protocols, Almond Stay cannot guarantee absolute protection against unforeseen electronic security breaches or system interceptions at the User's network end.
Secured Server Access Regulations: Whenever a User logs in, alters personal account parameters, or accesses sensitive verification records, the Platform dynamically activates a secured server framework. Once the information is in our possession, we adhere to strict physical and electronic security guidelines, permanently protecting your profile metrics against unauthorized third-party penetration or hardware data modifications.

Almond Stay operates premium holiday homes and farmhouses meant exclusively for users aged 18 years and older. We do not knowingly collect information from minors, and unmarried minor couples under 18 years of age are strictly barred from processing bookings or checking into our properties.

When the Almond Stay application is downloaded, installed, or initialized on your mobile device (Android configurations), specific system architecture permissions are dynamically requested to ensure high-performance in-funnel stability and seamless reservation processing:

Device & Application History Metadata: The Platform requests authorization to collect device-specific parameters, including operating system (OS) name, OS version indicators, mobile network carrier string, precise hardware model numbers, preferred language codes, and unique device identifiers (Android ID / Apple IDFV). This telemetry data is processed solely to optimize operational performance and deliver stable user interfaces adapted to the device's exact technical capability.
Identity & Account Integration: This structure enables the application to scan authorized account frameworks (such as active Google or Facebook auth profiles linked to the device). This data is utilized strictly to secure one-click registration, auto-populate email credentials for a typing-free check-in experience, and map user profiles for exclusive loyalty benefits or wallet cashback distributions.
Geographical Location Coordinates (Android/iOS): Utilized to dynamically auto-detect the User's immediate geographic zone. This enables automated autofill operations for the nearest leisure properties, location-specific tier discounts, localized emergency contact discovery, and exact real-time calculation of local time zones for check-in/out schedules.
SMS Communication Interface: If explicitly permitted, the software reads automated text parameters strictly to read, capture, and auto-prepopulate transaction-specific One-Time Passwords (OTPs). This ensures an uninterrupted booking flow without requiring the user to navigate away from the application transaction console.
Dialer & Phone Connectivity: Access to device telephony infrastructure is utilized to enable users to trigger direct voice calls to property caretakers, emergency desks, or our central Surat Operations Hub seamlessly through single-tap icons embedded in the booking dashboard.
Social Contacts Synchronization: If the User grants access, contact data matrices are securely synced to enable integrated social sharing components, such as dispatching booking vouchers, referral bonuses, or villa invites directly to friends. Filtered data strings may be cached on our servers strictly to formulate stay recommendations based on network trends.
Photo, Media & Storage Cache Architecture: The application requires read/write access to internal or external device memory architectures (such as SD card directories) to securely cache local property maps, property media parameters, and high-resolution layout graphics. This local storage caching ensures a high-speed, seamless visual browsing experience even on low-bandwidth networks.
Wi-Fi Optimization Loggers: Permits the software to identify the type of network connectivity (Wi-Fi vs Cellular data). Upon identifying high-speed Wi-Fi linkages, the system automatically adjusts streaming bandwidth to load rich imagery, premium virtual property tours, and detailed geographic assets at maximum clarity.
Google / iOS Calendar Integration: This allows the app to automatically register confirmed check-in and check-out timelines, alongside estate coordinates, directly into the User's native device calendar application to trigger proactive itinerary reminders.

iOS-SPECIFIC OPERATIONAL FRAMEWORK (APPLE APP STORE COMPLIANCE)

When initialized on iOS configurations, the software interacts with the native Apple sandbox permissions environment as follows:

Dynamic iOS Push Notifications: If the User explicitly opts into device notifications, the platform delivers real-time promotional updates, premium signature tier deals, and custom lifestyle announcements. If declined, core transactional data—including reservation status updates, PNR tracking metrics, booking confirmations, and urgent cancellation alerts—will be systematically routed exclusively via automated WhatsApp APIs and standard SMS channels.
Apple Contacts Access: Opting into this permission enables integrated social sharing functions within the iOS environment, allowing Users to seamlessly distribute villa booking vouchers, dispatch referral program links, or invite friends to download the application. Filtered contact strings are securely synced with our cloud backend to customize property recommendations based on network circles.
iOS Location Telemetry: Utilized to auto-detect immediate coordinates upon launching the iOS application. This enables automatic pre-population of the nearest available premium villas or farmhouses, unlocks geo-fenced local discount privileges, and accurately syncs the terminal interface with localized regional check-in timelines.

Right to Revise & Policy Upgrades: Almond Stay reserves the absolute sovereign right to update, modify, or revise this Privacy Policy from time to time to align with shifting statutory data regulations, advanced cybersecurity mandates, and evolving business requirements of Luxora Venture. Any critical updates modifying data sovereignty limits or sharing ecosystems will be duly notified to the users through conspicuous alerts on the Platform dashboards or registered communication parameters.
Statutory Execution: This Privacy Policy constitutes an automated electronic record in compliance with the Information Technology Act, 2000 and rules made thereunder. This policy requires no physical or digital signatures. All actions, usage data, and data management workflows are governed under the laws of India. Any unresolved legal claims, data disputes, or statutory actions shall strictly and exclusively be subject to the jurisdiction of the courts in Surat, Gujarat, India.

Almond Stay – Where Every Stay Becomes a Story