Last updated 24 October 2026.
Dastak is run by Harshit Arya as a proprietorship in North Goa, India. We build and run WhatsApp, booking-site and phone systems for hospitality businesses (our clients). This page explains what personal data passes through those systems, why, who else touches it, and how to have it deleted.
| Whose | Our role |
|---|---|
| Guests of our clients: people who message or call a hotel, villa or restaurant that uses Dastak | We process this on the client's behalf and on their instructions. The client decides what is kept and for how long. Under India's Digital Personal Data Protection Act, 2023, the client is the data fiduciary and Dastak is its data processor. |
| Our own contacts: owners and staff of businesses we talk to or work with | We decide how this is used, only to run our business with you. |
| What | Where it comes from |
|---|---|
| Name, or the profile name on your WhatsApp account | WhatsApp, or a call |
| Phone number | WhatsApp, or a call |
| The messages you send and the replies you receive | |
| Stay or booking details: dates, number of adults and children, room, requests | What you tell the desk in conversation |
| Call audio and a transcript, where the client uses our voice receptionist | The call. Every call says at the start that it is recorded |
| Business contact details of our clients and prospects | Meetings, email, WhatsApp |
We do not buy contact lists, scrape, or track anyone across other websites. The system never asks for or stores ID documents or card numbers.
| Who | What they do |
|---|---|
| The client business you contacted | Sees your conversation and booking details in order to serve you. |
| Meta (WhatsApp) | Carries the messages. Meta's own privacy terms apply to its side. |
| Cloudflare | Hosts our software and the database that holds conversation records. |
| Anthropic | Claude reads the conversation to understand what you need and draft a reply. Message text is sent for that purpose and is not used to train models. |
We do not sell personal data or share it with anyone else. Some of these providers process data outside India, as permitted under the DPDP Act for countries not restricted by the Central Government.
Replies are drafted by software working from facts the client has approved. Bookings are confirmed only by the client, and complaints, refunds, events and anything unusual are handed to the client's staff.
Guest conversations are kept for as long as the client uses Dastak, then deleted within 90 days of the contract ending unless the client asks us to return or delete them sooner. Our own business records are kept as long as the law requires.
Write to hello@dastak.co.in. If we don't resolve it, you can complain to the Data Protection Board of India.
This policy describes how the system works today. It has not yet been reviewed by an advocate.