Privacy Policy

Doorloom Private Limited

Last updated: August 8, 2026

1. Introduction

Doorloom Private Limited ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vacation rental management platform, including our website, dashboard, mobile applications, and messaging features.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

2.2 Mobile Application Data

Our mobile applications may collect:

2.3 Property Information and User Content

We collect property-related information that you provide, including:

2.4 Technical Information

We automatically collect certain technical information including IP addresses, browser type, device information, and usage patterns.

2.5 Messaging and Communications Data

When you or your guests communicate through messaging channels enabled on our platform (including WhatsApp), we collect and process:

3. How We Use Your Information

We use collected information to:

3.1 Property Discovery and Promotion

Doorloom Private Limited may operate additional domains or platforms (including search engines) to increase the visibility and discovery of properties listed by our users. Property information and User Content may be displayed on these platforms to enhance property exposure and booking opportunities.

4. Third-Party Services

We use third-party services to provide and improve our platform, including:

We share personal data with these providers only to the extent necessary to deliver our services. We do not share your personal data with third parties for their own marketing purposes.

5. WhatsApp Business Messaging

5.1 Our Role as a Technology Provider

Doorloom operates as a technology provider on the WhatsApp Business Platform. This means we provide software that enables property operators ("Hosts") to send and receive WhatsApp messages with their guests, manage message templates, and connect their WhatsApp Business Accounts to the Doorloom platform.

When a Host connects a WhatsApp Business Account to Doorloom, we access and manage that account on the Host's behalf, including sending messages, receiving messages, and creating message templates as directed by the Host.

5.2 Guest Communications

Where Hosts use Doorloom to communicate with their guests, Doorloom processes guest personal data (such as phone numbers and message content) as a service provider acting on the Host's instructions. Hosts are responsible for:

Guests who wish to access, correct, or delete their data in connection with a specific property should contact that property's operator. Guests may also contact us directly using the details in the Contact Information section, and we will assist or direct the request to the relevant Host.

5.3 Consent and Opt-Out

Business-initiated WhatsApp messages are sent only to recipients who have opted in to receive them. You may opt out of receiving WhatsApp messages at any time by:

Opting out of promotional messages does not affect essential service communications related to an active booking, which may still be delivered by other means.

5.4 Message Retention

Message content and metadata are retained for as long as necessary to provide our services, resolve disputes, and comply with legal obligations, consistent with Section 9 (Data Retention) of this policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

7. Cookies and Tracking

We may use cookies and similar tracking technologies to enhance your experience on our platform. You can control cookie preferences through your browser settings.

8. Your Rights

8.1 General Rights

You have the right to:

8.2 Rights under Indian Law (DPDP Act)

If you are in India, the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies to our processing of your personal data. Under the DPDP Act, you have the right to:

We process personal data on the basis of your consent or for legitimate uses recognized under the DPDP Act. You may withdraw consent at any time; withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may limit the services we can provide.

Grievance Officer

Name: Navin Shetty

Email: [email protected]

Address: 901 Saidham Bldg, Eksar Rd,
Borivali West, Mumbai 400092, Maharashtra, India

We will acknowledge and respond to grievances within the timelines prescribed under applicable law. If your grievance is not resolved to your satisfaction, you have the right to file a complaint with the Data Protection Board of India.

8.3 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR including the right to lodge a complaint with supervisory authorities.

8.4 CCPA Rights (California Users)

California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information (we do not sell personal information).

9. Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. Account data is deleted in accordance with the timelines set out in Section 10 (Account Deletion and Data Erasure).

10. Account Deletion and Data Erasure

10.1 How to Request Account Deletion

Users can request account and data deletion through the following methods:

10.2 Identity Verification

To protect your privacy and prevent unauthorized deletion requests, we require identity verification before processing deletion requests. You may be asked to:

10.3 Deletion Timeline

Upon receiving a valid deletion request:

10.4 What Gets Deleted

The following information will be permanently deleted:

10.5 Data We Must Retain

In compliance with legal and regulatory requirements, certain data must be retained even after account deletion:

10.6 Consequences of Account Deletion

Once your account is deleted:

10.7 Data Portability Before Deletion

Before requesting deletion, you have the right to download your data in a portable format. Data export requests must be made through your registered email address by sending a written request to [email protected] with the subject line "Data Export Request". Upon verification of your identity and registered email, data exports will be provided in CSV or JSON format within 7 business days.

10.8 Canceling a Deletion Request

During the 30-day grace period, you can cancel your deletion request by:

10.9 Third-Party Data Deletion

We will request deletion of your data from third-party service providers (analytics, payment processors, and messaging platforms such as WhatsApp/Meta) where technically feasible. However, we cannot guarantee immediate deletion from third-party systems beyond our control.

10.10 Deceased User Accounts

Family members or legal representatives can request deletion of a deceased user's account by providing:

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including transfers to Meta Platforms, Inc. in connection with WhatsApp messaging. We ensure appropriate safeguards are in place for such transfers.

12. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children.

13. Privacy Policy Updates

We may update this Privacy Policy periodically. We will notify users of material changes via email or platform notifications.

14. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Mumbai, India.

15. Contact Information

Privacy Officer

Doorloom Private Limited

Address: 901 Saidham Bldg, Eksar Rd,
Borivali West, Mumbai 400092, Maharashtra, India

Email: [email protected]

Phone: +91 8928 700200