Privacy Policy

AuditIQ for Hotels — a product of Nian Hospitality Private Limited

Last updated: 9 August 2026

This Privacy Policy explains how Nian Hospitality Private Limited ("Nian", "we", "us" or "our") collects, uses, stores and protects your personal data when you use AuditIQ at auditiqhotels.com (the "Service"). We are committed to handling your data responsibly and in line with the Digital Personal Data Protection Act, 2023.

By using the Service, you consent to the practices described in this policy.

1. Who we are

AuditIQ is an operational diagnostic tool for hotels, operated by Nian Hospitality Private Limited, a company incorporated in India. For any privacy question or request, contact us at info@nianhospitality.in.

2. What data we collect

When you use AuditIQ, we collect the following, all provided directly by you:

• Your name
• Your email address
• Your phone number
• Your hotel or property name
• Your city
• Your role at the property
• The answers you provide to the audit questionnaire and the resulting operational scores and report content

We do not collect or store your payment card details. All payments are processed by Razorpay, our payment processor. Card and bank information is handled entirely by Razorpay under their own privacy terms.

We also automatically collect limited technical data needed to run the Service securely, such as your IP address, which is used only for security and abuse prevention (rate limiting) and is not used to identify you personally.

We use Vercel Web Analytics to count visits to this website. It records the page visited, the site that referred you, and the country, device type and browser your browser reports. It does not use cookies, it does not follow you to other websites, and it does not build a profile of you. The web address is recorded without its query string, so an audit link or a property link can never appear in our analytics.

3. Why we collect it

We use your data only for the following purposes:

• To generate your operational audit report
• To deliver your report to you by email
• To contact you about your audit, including the follow-up consultation included with paid tiers
• To process payments for paid tiers (via Razorpay)
• To protect the Service from abuse and ensure its security
• To improve the Service over time

We do not sell your data. We do not share it for advertising. We do not use it for any purpose beyond those listed above.

4. Who we share it with

We share data only with the service providers necessary to operate AuditIQ. Each processes data solely on our behalf, for the purposes above:

• Google — we store audit and contact data in Google Sheets, and deliver reports by email using Google's email service.
• Razorpay — processes payments. Handles your payment details directly; we do not see or store them.
• Anthropic — provides the AI system that generates your report narrative from the answers you submit. Data sent for report generation is processed to produce your report.
• Vercel — hosts the Service and provides the cookieless visitor analytics described above.
• Upstash — provides rate-limiting infrastructure, which processes your IP address only, for security.

We may also disclose data if required by law, regulation or valid legal process.

5. Where your data is stored

Your data is stored on the infrastructure of the service providers listed above, which may process data on servers located outside India. We take reasonable steps to ensure your data is handled securely wherever it is processed.

6. How long we keep it

We retain your audit data and contact details for up to twelve (12) months from your last interaction with the Service, after which it is eligible for deletion. You may request deletion of your data at any time before then (see Section 8).

7. How we protect it

We apply reasonable technical and organisational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS across the Service)
• Server-side validation and rate limiting to prevent abuse
• Restricted access to stored data
• Payment handling delegated to a PCI-compliant processor (Razorpay)

No system is perfectly secure, but we work to protect your data using appropriate safeguards.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data
• Withdraw consent for us to process your data

To exercise any of these rights, email info@nianhospitality.in. We will respond within a reasonable period and in line with applicable law.

9. Children

The Service is intended for hotel operators and business users. It is not directed at children, and we do not knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy question, request or complaint, contact:

Nian Hospitality Private Limited
Email: info@nianhospitality.in