Smart Studios

Digital Personal Data Protection Act, 2023

Your data is used for one thing — the reason you gave it — and then it goes.

Whether you stay with us, rent, own, broker, sell or apply for a job, here is exactly how Smart Studios protects your personal data, what you can do with it, and who to talk to.

Built in, for everyone

These safeguards apply whoever you are.

Encrypted where it matters

ID numbers, PAN, bank accounts and delivery addresses are encrypted field by field (AES-256), with separate keys for identity, bank and order data, on top of encrypted storage.

Verified without copies

Identity is checked through DigiLocker. We keep the verified result and the last 4 digits of your Aadhaar, not a copy of the card.

Deleted on schedule

A daily job removes personal data once its purpose is served: check-in details after 30 days, enquiries after 90–180, order contact details after 180, unsuccessful job applications after a year.

Staff access is logged

When our team opens identity documents, full ID numbers, bank details or payment screenshots, it is recorded. Admin accounts need a second sign-in step every 12 hours.

No tracking without consent

Analytics only run if you allow them in the cookie banner. We use no advertising cookies and never sell personal data.

A plan for when things go wrong

Every security incident is recorded. If personal data is affected, we inform the Data Protection Board of India without delay and tell each person affected.

What it means for you

Guests

Your ID is used for check-in, then deleted

  • ID details from check-in are encrypted and deleted automatically 30 days after you check out. After checkout you can ask for them to be deleted straight away.
  • Card and UPI payments are handled by Cashfree. Your card details never reach our systems.
  • Book without creating an account. Analytics cookies only run if you allow them.
  • Download everything we hold about you, or delete your account, from Privacy & Security.

Renting or buying

Your enquiry goes only to the people handling it

  • Your contact details go to the owner or broker handling the listing, and are stored encrypted.
  • Enquiry details are deleted 90 days after it closes (180 days if it never does); site-visit details 30 days after the visit.
  • Track your enquiry with a private code. No account is needed.

Tenants

Your tenancy records stay yours

  • Your bank account is stored encrypted and checked with your bank before any payout.
  • Download your tenancy and payment history any time.
  • When your tenancy ends you can delete your account. Only the rent and tax records the law requires are kept, with your contact details removed.

Property owners

Verified without handing over copies of your Aadhaar

  • Identity is checked through DigiLocker. We keep only the last 4 digits of your Aadhaar, never a copy.
  • Your PAN is encrypted with a separate key. The full number is revealed only for TDS filing, and each reveal records who, when and why.
  • Ownership documents are kept in private storage, and your payout bank details are encrypted.
  • Connecting your own Airbnb or Booking.com listing never shares your OTA password with us, and OTAs receive only your unit’s prices and availability.

Brokers

Verified once, and your leads stay private

  • A one-minute DigiLocker check. No document copies are passed around.
  • Leads are routed only to you. Clients’ contact details are encrypted and deleted automatically once enquiries close.
  • Delete your account when you stop working with us. Only the records the law requires are kept.

Vendors & shops

Customers see your shop, not your private details

  • Bank account and IFSC are encrypted and verified with a ₹1 penny-drop. Your PAN is checked against DigiLocker.
  • Buyers see only the public shop details you choose. You decide whether your phone number is shown.
  • WhatsApp order links need your shop PIN before anyone can act on them, and buyer addresses are encrypted.
  • Customer contact details are removed 180 days after an order closes, and payment screenshots are deleted after a year.

Companies

Employee data used only for their stays

  • Employee details are used only to book and bill their stays.
  • Each employee can download or delete their own data, and withdraw consent, from their own account.
  • Payments go through Cashfree, so card details never reach our systems.

Job applicants

Your application, kept only as long as it’s useful

  • We ask your consent before using your details, and use them only to consider you for the job.
  • If you are not hired, your application is deleted automatically after a year.
  • You can ask what we hold about you, or for it to be deleted, at any time.

Your rights, one click away

Sign in and open Privacy & Security in the portal. No forms to post, no waiting for a reply to see your own data.

See and download your data

Privacy & Security → Download My Data gives you everything we hold about you in one file.

Withdraw consent

Every consent you gave is listed with its date. Withdraw any of them in one click, and we tell you exactly what changes.

Delete your account

Ask from Privacy & Security. It happens 7 days later, so you can change your mind. We keep only what tax law requires, with your contact details removed.

Name a nominee

Choose someone who can act on your data if you die or cannot act yourself.

Complain, and get an answer

Raise a grievance from your account or by email. We acknowledge it within 48 hours and resolve it within 30 days.

Open Privacy & Security

Where your data lives

  • Our database is hosted by Neon in Singapore, and the website runs on Cloudflare's network. Both are disclosed in our Privacy Policy and permitted under the Act.
  • Payments are processed in India by Cashfree, under RBI rules.
  • Uploaded documents sit in private storage. There are no public links.

Grievance Officer

Questions or complaints about your personal data:

Name:
Deepak Kumar, Director, Weffex Solutions Private Limited
Address:
Gaur City Center, Greater Noida West, Uttar Pradesh 201318

If we don't resolve your complaint, you can take it to the Data Protection Board of India. Full details are in our Privacy Policy.