1. Introduction and Scope
Cavorite AI LLC, a Delaware limited liability company ("Padosi," "we," "us," or "our"), makes and operates Padosi, its software platform for hotels and other accommodation providers, including the property management system and the AI receptionist. This Privacy Policy describes how we collect, use, disclose, and protect personal data, and the choices available to the individuals it concerns. It applies to:
- Hotels: businesses that use Padosi, together with their owners and staff ("Hotels");
- Guests: individuals whose information a Hotel records in Padosi, or who make a booking or use the AI concierge on a Hotel's booking page, book through an online travel agency ("OTA"), or contact a Hotel's AI receptionist ("Guests"); and
- Visitors: individuals who visit padosi.ai, including those who request a demonstration ("Visitors").
This Privacy Policy forms part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.
2. Our Roles
(a) Padosi as Data Fiduciary
For the personal data of Hotels and Visitors, Padosi determines the purposes and means of processing, and acts as the data fiduciary under India's Digital Personal Data Protection Act, 2023 (referred to as a "controller" in some other jurisdictions).
(b) Padosi as Data Processor
For Guest personal data, and any other personal data a Hotel records in Padosi, such as information about its staff, the Hotel determines the purposes and means of processing, and Padosi processes that data solely on the Hotel's behalf and in accordance with its instructions. The Hotel is responsible for informing its Guests how their data is used. Guests should direct requests regarding their data to the Hotel in the first instance; Padosi will assist the Hotel in responding, and Guests may also contact Padosi directly as described in Section 12.
3. Information We Collect from Hotels
- Account information: names, email addresses, mobile numbers, sign-in credentials, and the Properties each user is permitted to access. Passwords are stored only in hashed form and cannot be retrieved.
- Property information: the Property's name, address, contact details, room types, rates, policies, photographs, booking page content, and the UPI ID to which Guests make payments.
- Onboarding information: public information about the Property, gathered from its map listing, OTA listings, and website at the Hotel's request, which is used to pre-populate the Hotel's details for its review.
- Operational records: bookings, payments, invoices, expenses, and notes recorded in Padosi, together with the identity of the user who made each entry and the time it was made.
- Billing information: plan, invoice, and payment status. Payments to Padosi are processed by our payment gateway; we do not receive or store payment details.
- Assistant queries: questions submitted by Hotel users to the Padosi assistant, and the responses provided, which we use to improve the assistant and our help documentation.
- Mobile application data: device type, operating system and application version, a push notification token where notifications are enabled, and crash reports. The application accesses the device camera only when a user photographs a Guest's identity document.
- Correspondence: communications sent to us by email or through padosi.ai.
4. Guest Information Recorded by Hotels
A Hotel using Padosi may record the following information about its Guests:
- Contact and profile information: name, mobile number, email address, address, nationality where required by the Hotel, and the company on whose behalf the Guest is traveling, including that company's GST details for invoicing;
- Stay information: dates, rooms, rates, additional services, accompanying guests, and notes recorded by the Hotel;
- Identity documents: the document type, the name and address as printed, and photographs of the document. Padosi never stores a full Aadhaar number; only the last four digits are retained. For other document types, the Hotel may record the document number. Photographs are held in private storage accessible only to the Hotel's authorized users;
- Payment records: amount, method, date, and reference. Guests pay the Hotel directly; Padosi does not receive Guest funds or store Guests' bank details;
- Contact preferences: whether the Guest has consented to be contacted by the Hotel; and
- Email records: messages sent by Padosi on the Hotel's behalf, such as confirmations, invoices, and bills, and their delivery status.
5. Information Collected on Booking Pages
- Bookings: the name, mobile number, email address, and any special requests a Guest provides when booking, together with the payment method and reference.
- AI concierge: Guests may communicate with a Hotel's AI concierge. We retain each conversation, together with any name and mobile number a Guest provides to request a call back, for the Hotel's use and to improve the concierge. After 12 months, the text of the conversation and any name and number provided are deleted; non-identifying metadata about the conversation, such as its date and length, is retained.
- Abuse prevention: to protect the concierge from automated abuse, a security service evaluates technical signals from the Guest's browser, such as the IP address and browser type. We retain a one-way hash of the IP address to enforce usage limits and do not store the IP address itself.
- Browser storage: the booking page stores the Guest's room selection in the browser until the booking is completed or the browser tab is closed, and remembers the Guest's display theme preference. Booking pages do not use advertising cookies or third-party tracking technologies.
6. Reservations from OTAs
Where a Hotel uses the Channel Manager, reservations made through OTAs are transmitted to the Hotel's Padosi account through our channel management partner. This information includes the Guest's name and contact details as provided by the OTA, the stay dates, the room type, the booking amount, and the payment status reported by the OTA. The OTA's own privacy policy governs the information the Guest provided to the OTA. Our channel management partner also receives the Hotel's rates and availability for transmission to OTAs.
7. Artificial Intelligence
(a) Uses
Padosi uses artificial intelligence in the AI concierge, the staff assistant, identity document reading, and onboarding tools, and, where a Hotel has purchased it, the AI receptionist.
(b) AI Service Providers
The text, images, or audio required for each task are transmitted to our AI service providers, which process that data solely to generate a response. Under the terms on which we use these providers, they are not permitted to use this data to train their models, and we instruct them not to store it. Any limited retention they apply for security and abuse monitoring is governed by their own terms.
(c) Identity Document Reading
When a Hotel uses Padosi to read an identity document, the photograph is transmitted to our AI service provider for that single reading. Only the document type, name, and address are returned, never a document number, and the reading process does not itself store the photograph or its contents.
(d) No Model Training
Padosi does not use Hotel or Guest personal data to train artificial intelligence models.
(e) AI Receptionist
Where a Hotel has purchased the AI receptionist, calls to the Hotel's number are answered by AI and are recorded, transcribed, and summarized, and WhatsApp conversations are retained. Each caller is informed at the start of the interaction that they are communicating with an AI assistant and whether the call is being recorded. The Hotel may review recordings, transcripts, and conversations in Padosi. Padosi does not use recordings to identify individuals by their voice or to create voiceprints.
8. How We Use Information
We use personal data to:
- provide Padosi, including the dashboard, booking pages, the Channel Manager, the AI features, and emails sent on a Hotel's behalf;
- authenticate users and secure accounts;
- invoice Hotels and provide customer support;
- send Hotels service communications, such as invoices, security alerts, and notices of changes to our terms, which cannot be disabled while an account remains open; reports the Hotel has requested, such as the daily report; and product updates, each of which includes an unsubscribe option;
- diagnose and resolve technical issues, and improve Padosi using aggregated, de-identified data;
- detect and prevent fraud and misuse; and
- comply with our legal obligations.
We do not use Guest data for our own marketing, and we do not sell personal data.
9. How We Share Information
We disclose personal data only:
- to the Hotel to which the Guest data relates, through Padosi;
- to service providers that operate Padosi on our behalf, only to the extent necessary for them to perform their services and subject to contractual obligations to protect the data, including providers of hosting and database services, file storage, email delivery, telephony, artificial intelligence, abuse prevention, error monitoring, push notifications, and payment processing for Hotels' payments to Padosi;
- to our channel management partner and to the OTAs a Hotel connects, where the Hotel uses the Channel Manager (Section 6);
- to WhatsApp, where a Hotel uses the WhatsApp receptionist;
- to public authorities where required by law, or where necessary to protect the rights, property, or safety of Hotels, Guests, the public, or Padosi; and
- to an acquirer or successor in connection with a sale of Padosi's business (Section 15).
Because our service providers may change over time, we do not list them individually in this Privacy Policy. Hotels may request the current list by writing to [email protected]. We do not sell, rent, or trade personal data, and we do not provide personal data to data brokers.
10. Data Location and International Transfers
Padosi's primary database and file storage are located in India (Mumbai). Certain of our service providers process data outside India, principally in the United States, for artificial intelligence processing, telephony, email delivery, and error monitoring. Our website is delivered through a global content delivery network. We transfer personal data outside India only for the purposes described in this Privacy Policy, and our error monitoring is configured to remove personal details from error reports before they are transmitted.
11. Data Retention
- Active accounts: we retain a Hotel's data, including Guest data and AI receptionist recordings, transcripts, and conversations, for as long as the Hotel's account remains active. Certain records may be deleted directly in Padosi; other deletion requests may be sent to [email protected].
- AI concierge conversations: the text of each conversation, and any name and number provided, are deleted after 12 months.
- Closed accounts: when a Hotel's account ends, we retain its data for 90 days to allow the Hotel to export it or to resume its subscription. At the end of that period, we delete the Hotel's data, its Guest data, and its AI receptionist recordings, transcripts, and conversations, unless the Hotel has resubscribed within the 90-day period.
- Hotels' legal records: Hotels are responsible for retaining any records they are legally required to keep, such as accounting records and guest registers, and should export them before their account ends.
- Padosi's legal records: we retain our own invoices and billing records for the period required by applicable tax law.
- Demo requests and correspondence: we retain these for as long as necessary to respond and follow up, and will delete them upon request.
- Backups: copies of deleted data may persist in encrypted backups for a limited period until they are overwritten in the ordinary course.
- Aggregated data: aggregated, de-identified data may be retained indefinitely.
Uninstalling the Padosi mobile application does not delete an account or its data. To close an account, please write to [email protected].
12. Your Rights
Depending on the law that applies to you, including India's Digital Personal Data Protection Act, 2023, you may have the right to obtain a summary of the personal data we hold about you; to have it corrected, completed, or updated; to have it erased; to withdraw consent where our processing relies on consent; to nominate another person to exercise your rights in the event of your death or incapacity; and to seek redress for grievances.
- Hotels: many of these rights can be exercised directly in Padosi. For any other request, please write to [email protected].
- Guests: because the Hotel controls your data, please contact the Hotel first; it can act on most requests directly in Padosi. You may also write to us, and we will forward your request to the Hotel and assist it in responding.
- Guests outside India: if the EU or UK General Data Protection Regulation or a similar law grants you rights, you may exercise them through the same channels.
We may need to verify your identity before acting on a request, and we may decline requests that we cannot verify or that applicable law does not require us to fulfill.
13. Data Security
We implement industry-standard technical and organizational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Database-level access controls that isolate each Hotel's data from that of every other Hotel
- Passwords stored only in hashed form
- Private storage for identity document photographs
- Access by Padosi personnel only where necessary for a specific task
- Contractual security obligations on our service providers
No method of transmission or storage over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected individuals and appropriate authorities as required by applicable law.
14. Children's Privacy
Padosi accounts are available only to individuals aged 18 or older. Hotels may record information about children who stay at their Property as part of a booking or guest register, and that information is processed in the same way as other Guest data, on the Hotel's instructions. The AI concierge and AI receptionist are not directed at children. If you believe that a child has provided personal data through either of them, please contact us at [email protected] and we will work with the Hotel to delete it.
15. Business Transfers
In the event that Cavorite AI LLC is sold, merged, acquired, or transfers substantially all of its assets, personal data may be part of that transfer, subject to commitments from the successor entity to provide substantially similar privacy protections. If such a transfer occurs, we will notify Hotels by email before the transfer takes effect. Hotels may request the deletion of their account and its data at any time. Any changes to data practices following a transfer will be subject to the notification requirements described in Section 16.
16. Changes to This Policy
We may update this Privacy Policy from time to time. All changes will be posted on this page with an updated "Last updated" date and a plain-language summary of what changed.
Recent Changes
2026-10-06: we stated that Padosi is a product of Cavorite AI LLC, and that the same care applies to all personal data a Hotel records in Padosi, including information about its staff.
Notification
For material changes, we will notify Hotels by email before the changes take effect. The notification will include a summary of what changed. For visitors without an account, we will display a prominent notice on our website or within the mobile application.
Consent
For routine updates (clarifications, formatting changes, typographical corrections), continued use of Padosi after notification constitutes acceptance. For material changes that affect how personal data is collected, used, or shared, we will provide reasonable notice before the changes take effect. If you do not agree with the updated policy, you may close your account and discontinue use of Padosi.
17. Contact Us and Grievance Officer
If you have any questions about this Privacy Policy, or to make a rights request, please contact us:
Cavorite AI LLC (Padosi)
Email: [email protected]
Website: padosi.ai
Grievance Officer
If you have a complaint regarding Padosi's handling of personal data, or regarding a booking page, please write to our Grievance Officer at [email protected] with "Grievance" in the subject line. We will acknowledge each complaint within 48 hours and aim to resolve it within one month.