Privacy Policy

GoHolix (“GoHolix”, “we”, “us”) operates the GoHolix platform and is responsible for personal data it determines how and why to process. Contact details and the grievance route are at the end of this notice.

Each account holder is independently responsible for contact lists, messages and other personal data they collect or use outside GoHolix, including the decision to send you a private link. Ask them about those activities. GoHolix does not receive the phone number or email address to which a share link is sent unless it is later provided through a GoHolix account, booking, support request or other platform feature.

• Account and profile data: name, business name, email address, phone or WhatsApp number, subdomain, password hash, verification status and administrator decisions.
• Property and business content: listing details, addresses, prices, availability, house rules, photos, videos and the identity of the account that supplied them.
• Guest and booking data: account contact details, guest names, travel dates, party size, special requests, booking status, quoted prices, payment-status records and cancellation information. GoHolix currently does not collect card details or process online card payments.
• Private-link data: the account and properties associated with a randomly generated share or review token, and when that link was created, submitted or revoked. A property share itself is not tied to a named recipient.
• Reviews: property and advisor ratings, written feedback, optional images, submission time and the private review token.
• Google Drive connection data: the connected Google account email, encrypted authorisation token, folder/file identifiers and connection time when an advisor chooses this feature.
• Security and technical data: session identifiers, CSRF tokens, browser or device user agent, hashed IP address, request identifiers, audit logs and diagnostic records.
• Communications: information sent to support or in a complaint. WhatsApp messages are handled by WhatsApp and the participants; GoHolix only prepares a link and message draft unless the message is separately sent to us.

We receive data directly from account holders and review submitters; from advisors and property operators who add listings or manage bookings; automatically when the platform handles a request or secures a session; and from service providers you choose to connect, such as Google. Advisors may enter information about a booking or guest where they are authorised to do so.

• create, authenticate, verify and administer accounts;
• host listings and generate private property and review links;
• provide quotes, enquiries, bookings, availability and follow-up workflows;
• display ratings and reviews, subject to moderation and the reviewer’s choices;
• store or display advisor-uploaded videos through an optional Google Drive connection;
• protect accounts, prevent misuse, investigate incidents and maintain audit records;
• respond to support, privacy and consumer grievances; and
• meet legal obligations and establish, exercise or defend legal claims.

We process digital personal data with your consent where consent is requested, to provide a service or action you voluntarily request, and for other uses permitted or required by applicable law. You may withdraw consent by contacting us, but withdrawal does not affect processing already completed and may prevent the relevant feature from continuing.

We share only what is reasonably needed with:

• Advisors, property operators and guests involved in a listing, enquiry, booking or review;
• hosting, database, storage, email, security and technical vendors that support the platform under appropriate contractual controls;
• Google when an advisor connects Drive, and WhatsApp/Meta when a user chooses to open or send a WhatsApp message, under those providers’ own terms and privacy policies;
• professional advisers, authorities or courts where necessary for legal compliance, safety or claims; and
• a successor organisation in a merger, financing, reorganisation or sale, subject to applicable law.

A person with a valid private-link URL can view its contents without signing in. Recipients should not forward it, and advisors should revoke links that are no longer needed. Private links reduce casual discovery but are not a guarantee that only one named person can view the page.

Submitted ratings may be combined into property or advisor averages. Written feedback and uploaded images may be displayed on GoHolix or on the relevant advisor’s pages after moderation. Do not include identity documents, payment data, precise home addresses or information about another person without permission. Contact us if you want a review corrected or removed; legal recordkeeping or dispute needs may require us to retain a limited copy.

GoHolix uses essential cookies for sign-in, session refresh and cross-site request protection. They are needed for account and security functions. We do not currently use advertising cookies or third-party behavioural analytics. A public-link visitor may still send an existing GoHolix cookie if they previously signed in on the same domain.

We keep personal data only while it is needed for the purposes above or for a legal, accounting, security or dispute requirement. Account and listing data is normally kept while the account is active. Sessions expire or are revoked; private links remain until revoked or the associated account becomes unavailable; reviews and booking records may be retained for service history, consumer complaints and legal claims. When retention is no longer necessary, data is deleted or anonymised, including from backups on their normal rotation cycle.

We use measures designed to protect data, including access controls, hashed passwords, encrypted Google authorisation tokens, short-lived access sessions, rotating refresh sessions, CSRF protection, tenant isolation and audit logging. No system is completely secure, so keep credentials and private links confidential and tell us promptly about suspected misuse.

Some providers, including Google or WhatsApp, may process information outside India. We use providers subject to their contractual safeguards and will observe any transfer restrictions notified under applicable Indian law.

Subject to applicable law, you may ask for a summary of your personal data and processing, correction or completion, erasure, withdrawal of consent, and grievance redressal. Where available under law, you may nominate another person to exercise rights in the event of death or incapacity and complain to the Data Protection Board of India after using our grievance process. We may verify your identity and may retain information where law allows or requires it.

For an advisor’s separate outreach or records, contact the advisor first. For GoHolix data, email us with the address connected to your account or enough detail to locate the relevant private link or review. You may also disconnect Google Drive from the advisor workspace and revoke GoHolix access in your Google account settings.

GoHolix accounts and review submissions are intended for people aged 18 or older. Do not submit a child’s personal data unless you are their parent or lawful guardian and it is necessary for a legitimate booking purpose. Contact us if you believe a child provided data without appropriate authorisation.

We may update this notice to reflect product or legal changes. We will post the new effective date and provide additional notice where a change materially affects your rights or requires fresh consent.

Send privacy requests and grievances to the contact below. We aim to acknowledge consumer complaints within 48 hours and resolve them within one month where the Consumer Protection (E-Commerce) Rules, 2020 apply.