Legal

Privacy policy

Last updated: 3 October 2026

This policy explains what personal data RYST Harbour collects, why, who it is shared with and the choices you have. RYST Harbour is run by Dreamour Multiventures (“we”, “us”). It covers harbour.ryst.in, the RYST Harbour Android app, the server at data.ryst.in, villa booking websites powered by RYST Harbour, and the guest links villas send through it.

1. Who is responsible for your data

Villa owners and their team. For the accounts of villa owners, managers and caretakers who use RYST Harbour, we decide how that data is used and are responsible for it (the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023).

Guests of a villa. When a villa uses RYST Harbour to take a booking, send a message, issue an invoice or run check-in, that villa decides what it collects about its guests and why. The villa is responsible for that data, and we process it on the villa’s behalf and only on its instructions. If you are a guest, please contact the villa first; we will help the villa respond to you. RYST 109A’s own guest website, stay.ryst.in, has its own privacy policy.

2. What we collect

From villa owners and their team

• Account details: your email address and name from Google sign-in, your role and what you can access, and, if you add them, your phone number and Telegram chat ID for alerts.
• Villa business records you enter: the property profile, bookings, quotes and invoices, payments received, GSTIN and bank or UPI details printed on invoices, expenses and petty cash, receipt photos, issues and their photos, checklists, inventory, restaurant orders, reviews and website content.
• Subscription payments: plan, invoices and payment status. Card, UPI and bank details are handled by Razorpay; we never see or store full card numbers.
• Device data: if you turn on notifications, your browser’s or phone’s push address; if you add a home-screen widget, a widget key (we store only a scrambled copy of it).
• Technical logs: IP address, browser or app version and request times, kept for security and troubleshooting.

About guests, on behalf of a villa

• Name, phone number, email, number of guests and stay dates.
• Quotes, invoices, payments and balances, including Razorpay payment references.
• Check-in details the villa asks for, food orders and feedback.
• Bookings made on online travel agencies (Airbnb, Booking.com, Agoda, MakeMyTrip and others): the dates the agency shares in its calendar feed and any details the villa adds.

We do not use analytics, advertising cookies or trackers. The web app keeps your sign-in and settings (such as language) in your browser’s local storage.

3. How we use it

• To provide RYST Harbour: sign you in, show each person only what their role allows, keep calendars in sync, send the messages and alerts you set up, create invoices and reports.
• To bill the villa’s subscription and keep tax records.
• To keep the service secure, prevent misuse and fix problems.
• To contact you about your account, changes to the service or these policies.
• To meet legal obligations, such as tax and accounting rules or a valid order from a court or authority.

We do not sell personal data, use it for advertising, or use guest data for any purpose other than serving the villa that collected it.

4. Who we share it with

Only with the service providers that run parts of RYST Harbour, and only what each needs:

A villa’s data is shared with the people that villa gives access to. We may also disclose data when the law requires it, or to protect the rights and safety of our users and the public.

5. Where it is stored

Our providers may store and process data on servers outside India. We use providers with recognised security practices and transfer data only as permitted by Indian law.

6. How long we keep it

• Accounts and villa records: while the villa’s account is active. After an account closes, the villa can export its data for 30 days; we then delete it within 90 days.
• Invoices and payment records: as long as tax and accounting laws require, which can be up to 8 years.
• Technical logs: up to 90 days.
• Backups: deleted data leaves our backups as they are replaced.

7. How we protect it

All traffic uses HTTPS. Sign-in sessions are signed and expire; each person sees only what their role allows; each villa’s data is kept separate; payment and messaging keys are encrypted; and widget keys are stored only in scrambled form. No system is perfectly secure: if a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

8. Your rights and choices

You can ask to see the personal data we hold about you, correct or update it, or have it deleted, and you can withdraw consent you have given. You can also nominate someone to exercise these rights for you if you die or become unable to.

• Correct: most details can be changed in the app (Settings and your team profile).
• Delete your account: in the app, open your account menu and choose Delete account, or see how account deletion works.
• Notifications: turn them off from your account menu, or in your phone’s settings.
• Anything else: email info@dreamour.in. Guests: please contact the villa first.

9. The Android app

The RYST Harbour app opens harbour.ryst.in in Chrome, so this policy applies to it in full. It asks for only two permissions:

• Notifications, so booking, payment and issue alerts can reach you. You choose whether to allow them.
• Internet, so home-screen widgets can load your villa’s numbers.

The app cannot read your photo gallery. It only receives a photo you choose to share with it or pick in the app (for example, a bill for an expense), and Chrome asks before using the camera.

10. Children

RYST Harbour is a business tool for adults. Villa accounts and team members must be 18 or older. Villas are responsible for the guest data they enter, including that of children travelling with their parents.

11. Changes to this policy

We will update the date at the top when this policy changes, and tell villa owners in the app or by email about any important change before it takes effect.

12. Contact and grievances

Questions about this policy or your data, and complaints, go to our Grievance Officer: