HostFlow Privacy Policy

Last updated 2 October 2026

HostFlow (“HostFlow”, “we”, “us”) is a product operated by MDNY TECH PRIVATE LIMITED, a company registered in India with its registered office at Plot no. 216, Amar Shrusti, Near Gadital, Hadapsar, Pune, Maharashtra 411028, India. This policy explains what information HostFlow collects, why, and how it's handled, for both property owners who use HostFlow (“Owners”) and the guests who message an Owner's property through HostFlow (“Guests”).

1. Information we collect

  • Owner account data: name, email, phone, property details, and pricing/policy configuration entered into HostFlow.
  • Guest messaging data: phone number (WhatsApp) or Instagram handle, and the content of messages exchanged with an Owner's automated assistant, for the purpose of answering questions and processing bookings.
  • Booking & payment data: stay dates, guest count, and payment status. Card/UPI details are handled directly by our payment processor (Razorpay) — HostFlow never stores raw payment credentials.
  • Usage data: standard technical logs (IP address, device/browser type, timestamps) for security and reliability.

2. How we use it

We use this information to operate the booking assistant (answering guest questions, checking availability, and recording bookings on behalf of the Owner), to process payments, to send booking-related notifications (confirmations, reminders, receipts), and to maintain and improve the service. Guest messages may be processed by an AI language model (currently Google Gemini) solely to generate a relevant reply to that guest's question about the property or their stay — never for advertising or resold to third parties.

3. Sharing

We share data only with the service providers needed to run HostFlow: Meta (WhatsApp/Instagram messaging delivery), Razorpay (payment processing), Google (AI-assisted replies and infrastructure), and Amazon Web Services (file/photo storage). We do not sell personal data to anyone.

4. Data sharing policy

MDNY TECH PRIVATE LIMITED does not share user data with third parties except where necessary to operate our services (such as our payment, messaging, or hosting providers), or in response to a lawful request from law enforcement or another public authority, verified for its legal validity by our legal team. In such cases, only the minimum information necessary is disclosed, and every request along with our response is formally recorded for accountability.

5. Data retention & security

Booking and conversation records are retained for as long as the Owner's account is active, to support ongoing guest stays, disputes, and legal/accounting requirements, and are deleted or anonymised on request where we are not legally required to keep them. Access tokens and payment credentials are encrypted at rest. Access to guest data is limited to the Owner of that property and HostFlow staff who need it to operate the service.

6. Your rights

You can request a copy of, correction to, or deletion of your personal data by writing to hello@mdny.in. Guests can also make this request through the property Owner they messaged.

7. Contact

MDNY TECH PRIVATE LIMITED
Plot no. 216, Amar Shrusti, Near Gadital, Hadapsar, Pune, Maharashtra 411028, India
hello@mdny.in

← Back to sign in