Skip to main content

Privacy Policy

Last updated 30 July 2026

1. Who we are

ALTR (also referred to as BookALTR) is a marketplace for booking venues in India, operated by INISH Services, a sole proprietorship ("ALTR", "we", "us"). For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), ALTR is the Data Fiduciary for the personal data processed through the Platform. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have.

2. The data we collect

Information you give us:

  • Account and identity: your name, email address, phone number, and date of birth (you must be 18 or older to use ALTR).
  • Host verification (KYC): if you list a space and receive payouts, we collect verification details such as PAN, bank account details, a government photo ID, and GSTIN where applicable.
  • Booking information: event briefs, dates, guest counts, selected add-ons, and the messages you exchange with the other party, including moderation signals where a message is blocked or reviewed.
  • Business and billing details (optional): company name, job title, work email, industry, GSTIN, and billing address for work bookings and invoices.
  • Content: the listing descriptions and photos you upload, and any reviews you post.

Information we collect automatically:

  • Technical and usage data such as your IP address, device and browser type, and pages viewed, collected through cookies and similar technologies.

Information from others:

  • Payment status and the limited related details we receive from our payment processor.

3. How we use your data

We use personal data to:

  • create and manage your account and verify that you are 18 or older;
  • operate bookings, including sharing the details a host or guest needs to fulfil a booking and enabling messaging between you;
  • moderate Platform chats using automated filters and admin review to enforce non-circumvention rules, prevent fraud and abuse, provide support, and protect users;
  • process payments, payouts, refunds, deposits, and taxes;
  • run host verification (KYC) and prevent fraud and abuse;
  • provide support and respond to your requests;
  • send transactional messages such as confirmations, receipts, and security and account notices;
  • send marketing email where you have opted in;
  • understand and improve how the Platform is used, including analytics; and
  • meet our legal, tax, and regulatory obligations.

Under the DPDP Act, we rely on your consent or on the legitimate uses the Act permits, such as providing a service you have asked for and meeting legal obligations.

4. The AI recommender

When you use our AI assistant to find a space, the brief you type is sent to a third-party AI provider (Anthropic) to generate recommendations. We do not send your contact, payment, or KYC details for this purpose.

5. Payments

Payments are processed by Razorpay using split-settlement. Your card and bank details are handled by Razorpay under its own terms and privacy policy; ALTR does not store full card numbers. We receive transaction status and the limited details we need to manage bookings, payouts, refunds, deposits, and taxes.

6. Cookies and analytics

We use essential cookies to keep you signed in and to operate the Platform. We plan to introduce analytics and advertising tools (for example, Google Analytics and the Meta pixel) to understand usage and measure marketing. Where the law requires consent for non-essential cookies, we will ask for it and let you manage your choices, and we will update this policy when those tools go live.

7. Who we share data with

We share personal data only as needed:

  • Hosts and guests: to set up and fulfil a booking. For example, a host sees your name on a request, and once a booking is confirmed, the contact details needed to coordinate are shared.
  • Service providers who process data on our instructions: our payment processor (Razorpay), our cloud hosting, database, storage, and authentication providers, our email providers, and, in future, analytics providers.
  • Legal and regulatory recipients: where required by law, court or government order, or to protect rights and safety and prevent fraud.
  • Business transfers: if ALTR's business is reorganised, merged, or acquired, your data may be transferred subject to this policy.

We do not sell your personal data.

8. International transfers

Some of our service providers may process data outside India. Where they do, we take steps consistent with the DPDP Act and applicable law to protect your data.

9. How long we keep it (retention)

We keep your personal data for as long as your account is active and for as long as we need it for the purposes in this policy. Chat messages and moderation records may be retained while needed to support bookings, enforce our Terms, prevent fraud, and resolve disputes. After that, we keep only limited records that the law requires us to retain (for example, transaction, tax, and GST records, which Indian law generally requires us to keep for up to eight years) or that we need to resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it.

10. How we protect your data

We use technical and organisational measures such as access controls, encryption in transit, and database row-level security to protect personal data. No system is perfectly secure, but we work to safeguard your information and will notify you and the Data Protection Board of India as required if a reportable breach occurs.

11. Your rights

Under the DPDP Act you can:

  • access a summary of the personal data we hold about you and how we process it;
  • ask us to correct, complete, or update inaccurate data;
  • ask us to erase data we no longer need;
  • withdraw consent at any time, including marketing consent, using the unsubscribe link in any marketing email or the Communications setting in your account;
  • nominate another person to exercise your rights if you die or become incapacitated; and
  • raise a grievance with our Grievance Officer.

To exercise any of these, email hello@bookaltr.com. We may need to verify your identity before we act on a request.

Erasure has one limit worth stating plainly. When you ask us to erase your data, we remove the details that identify you, such as your name, contact details, date of birth, KYC details and bank details. We keep the underlying transaction and tax records that Indian law requires us to retain (see section 9), with your identity removed from them. So a booking you paid for still exists in our accounts, but it is no longer linked to you.

12. Children

ALTR is for users aged 18 and over, because bookings involve payments and KYC. We ask for your date of birth during sign-up. If it shows you are under 18 we stop there: we do not save your name, phone number or date of birth, our database rejects the attempt, and you cannot book. Signing in with an email address does create a sign-in record before we reach that question, and we delete it along with anything else we hold if we learn the account belongs to someone under 18. Write to us at the address in section 13 and we will do that.

13. Grievances and contact

Grievance Officer: Himanshi Singh, INISH Services.

  • Email: hello@bookaltr.com
  • Phone: +91 91801 77873
  • Address: #5, Ganapathinagar Main Rd, Chikkabanavara, Karnataka 560107, India

Write to us at that email for any question about your data or this policy, including to exercise the rights in section 11. We acknowledge complaints within 24 hours and aim to resolve them within the timelines set by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "last updated" date, and for material changes we will notify you by email or in the app.