Privacy Policy

Mauji Bear is operated by Theoretic Softnet Pvt Ltd, 4th Floor, A-07, D Block, Sector 10, Noida, Uttar Pradesh 201301, India ("we", "us"). This policy explains how we handle the personal data of people who search, create an account or book a stay on Mauji Bear.

For your account, preferences and booking requests, we decide how the data is used, so we are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023. The hotel you book is a separate Data Fiduciary for your stay: we pass it the details it needs to host you, and it is responsible for how it uses them during and after your stay.

• Account details: name, email, phone number and your password (stored only as a one-way hash).
• Booking details: the hotel, room, dates, number of guests, your name, email and phone, and any special request you write.
• Reviews you choose to write.
• Your preferences: the priorities you set when searching. They are scored on your own device and kept in your browser, not on our servers.
• Technical data: IP address, browser and device type, and pages used, collected for security and to make the site work.
• Messages: the booking confirmations and messages sent to you, and what you write to us.
• Consent records: what you agreed to, which version, when, and from which device.

We do not collect card or payment details on Mauji Bear. Bookings are currently paid at the hotel.

• To let you search, hold a room and complete a booking, and to send you the booking confirmation.
• To run your guest account, including your in-stay portal.
• To personalise search results on your device.
• To keep Mauji Bear secure and prevent misuse.
• To meet legal duties, including tax record-keeping by hotels.
• To send you travel offers and updates only if you chose to receive them.

We ask you to accept these terms and this policy with a clear tick when you create an account and when you book. We ask again whenever the documents change in a way that matters. Travel offers by email and sharing your details with partner hotels are separate, optional choices, off unless you switch them on. Nothing is pre-ticked.

You can withdraw any choice at any time, as easily as you gave it, in your Privacy Centre, and you can unsubscribe from any marketing email with one click. Withdrawing stops that use from then on; it does not undo what was already done, and booking confirmations and receipts still reach you because they are part of your booking.

We do not sell your personal data. We share it only with:

• The hotel you book, so it can confirm and host your stay. This is necessary for the booking.
• Service providers who help us run Mauji Bear: Supabase (database hosting), Hostinger (website hosting), Cloudflare (bot protection), and the email or WhatsApp service used to send your booking messages.
• Partner hotels, only if you switched on sharing in your Privacy Centre.
• Authorities, when the law requires it.

Our database is hosted by Supabase in the Tokyo (Japan) region and the website runs on Hostinger's servers, so your data is transferred outside India. The DPDP Act allows this except to countries the Government of India restricts. We use providers with industry-standard security and will stop transfers to any country that becomes restricted.

We use encrypted connections (HTTPS), hashed passwords, access controls so that people only see data they need, protection against common web attacks, and limits on repeated sign-in attempts. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

• Your account and preferences: until you delete your account.
• Booking and invoice records: the hotel must keep them for 7 years under Indian GST law. After you delete your account they are kept without your personal details.
• Consent records: kept as proof, without contact or device details once your account is erased.
• Security logs: about 1 year.

• Access: see your data and download it at any time.
• Correction and updating: change your details in your account, or write to us.
• Erasure: delete your account and personal data yourself (see below).
• Withdraw consent: switch email or sharing off whenever you like.
• Grievance redressal: complain to our Grievance Officer. We acknowledge within 24 hours and resolve within 15 days.
• Nominate someone to exercise your rights if you die or are unable to.

To use a right over the records a hotel holds about your stay, you can also contact that hotel. We will help it respond.

Go to Privacy Centre, choose Delete my account and confirm with your password. No approval is needed. Your account is scheduled for deletion and your personal data is erased after 30 days. Until then you can cancel, and simply signing in again also cancels it.

You cannot delete your account while you have a booking that has not finished, because the hotel still needs to reach you. After your stay you can delete it.

What stays: hotels must keep booking and invoice records for tax law. They stay without your name, contact details or free-text notes.

Mauji Bear accounts and bookings are for adults aged 18 or over. A parent or guardian may include a child's name or age in a booking for the stay. We do not knowingly collect data from children, and we do not track or target children.

We use only essential cookies and browser storage: a secure sign-in cookie, a marker that you are signed in, your search preferences and your active booking hold, kept in your browser. We do not use advertising cookies. If we use analytics, it is limited to measuring how the site is used and does not include advertising trackers.

When we change this policy in a way that matters we update the version and date above, and ask you to accept the new version the next time you sign in. Your earlier acceptances are kept on record.

Grievance Officer, Theoretic Softnet Pvt Ltd, 4th Floor, A-07, D Block, Sector 10, Noida, Uttar Pradesh 201301, India. Email contact@maujibear.com or call +91 92679 70157. You can also write to us from the form in your Privacy Centre.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Questions about privacy: contact@maujibear.com. This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023.