This Privacy Policy explains how SetStay collects, uses, shares, and protects your personal information when you use the SetStay mobile application and website (together, the "Platform") to search for and book flights, hotels, and activities, and to use the SS Wallet. SetStay serves individual (B2C) travelers directly — we do not sell or rent your personal information to third parties. SetStay (operated by ATW Stays (OPC) Private Limited) is based in New Delhi, India, and this Policy is governed by Indian law.
We collect the information you provide directly, such as traveler/guest name, date of birth, gender, email, mobile number — and, for international flight bookings, passport number, nationality, and passport issue/expiry dates. For hotel and activity bookings we collect the guest names and contact details needed to confirm your booking with the property or operator. For SS Wallet, we collect top-up amount, payment method (UPI/bank transfer), and the reference/UTR number you submit for verification. We also collect technical information such as your device identifier, app version, approximate location (derived from IP address, for fraud prevention and tax purposes), and search/booking activity.
Your information is used to search for and book flights, hotels, and activities; submit your booking to the relevant airline, hotel, or activity operator; re-verify live prices before payment; process payments and wallet top-ups; send booking confirmations, e-tickets, vouchers, invoices, and status updates (by email and push notification); provide customer support; detect and prevent fraud or abuse; and improve the reliability and speed of the Platform.
We share only what is necessary, only with: (a) the operating airline, hotel property, or activity operator, and SetStay's booking-supply partners, to create and confirm your booking; (b) our payment gateway (Cashfree), to process your payment securely — SetStay does not store your full card number, CVV, or UPI PIN; (c) SMS/email/push-notification providers, to deliver booking communication; and (d) tax authorities, where required by law (e.g. PAN and Tax Collected at Source (TCS) declarations on international bookings). We do not sell your personal information to advertisers or data brokers.
SS Wallet balance, top-up requests, and transaction history are stored against your registered email/account. Top-ups made by bank transfer or UPI are manually verified against the reference number you provide before your wallet is credited — we do not have automated access to your bank or UPI app. All online card/UPI/netbanking payments are processed directly by Cashfree, our RBI-regulated payment gateway partner; SetStay's servers never receive or store your raw card or UPI credentials.
The Platform recognizes your device through a secure device token, and your account through an email + OTP (one-time password) login — not a traditional username/password. OTPs are time-limited and sent only to the email address you provide.
With your device's permission, we send push notifications for payment confirmation, ticket/voucher issuance, trip reminders, and wallet activity. You can disable these at any time from your device's notification settings; disabling them does not affect email confirmations.
Passwords, API keys, and other credentials used to connect to airline, hotel, activity, and payment systems are held only on SetStay's servers and are never sent to or stored on your device. Traveler, guest, and passport information you submit is transmitted over encrypted (HTTPS) connections and stored on access-restricted servers.
We retain booking, guest/traveler, and wallet transaction information for as long as necessary to fulfil your booking, comply with accounting, tax, and other legal record-keeping requirements, and resolve any disputes or chargebacks. Saved traveler profiles (used to speed up future bookings) are kept until you ask us to delete them.
You may ask us to review, correct, or delete the personal information we hold about you, including saved traveler profiles, by contacting SetStay support. Deleting information tied to an active or upcoming booking, or an SS Wallet balance, may affect our ability to service that booking or balance.
The Platform is not directed at children. Information about a child or infant traveler/guest is collected only as part of an adult's booking and solely for the purpose of completing that booking.
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or for legal reasons. Continued use of the Platform after an update constitutes acceptance of the revised policy.
This Policy is governed by the laws of India. Any dispute relating to this Policy is subject to the Dispute Resolution and Jurisdiction clause in our Terms & Conditions (exclusive Delhi arbitration and courts).
If you have questions about this Privacy Policy or how your information is handled, please reach out to SetStay Customer Care at (011) 69296230 or support@setstay.com.