Privacy

Last updated 24 October 2026.

Dastak is run by Harshit Arya as a proprietorship in North Goa, India. We build and run WhatsApp, booking-site and phone systems for hospitality businesses (our clients). This page explains what personal data passes through those systems, why, who else touches it, and how to have it deleted.

Two kinds of data

WhoseOur role
Guests of our clients: people who message or call a hotel, villa or restaurant that uses DastakWe process this on the client's behalf and on their instructions. The client decides what is kept and for how long. Under India's Digital Personal Data Protection Act, 2023, the client is the data fiduciary and Dastak is its data processor.
Our own contacts: owners and staff of businesses we talk to or work withWe decide how this is used, only to run our business with you.

What we collect

WhatWhere it comes from
Name, or the profile name on your WhatsApp accountWhatsApp, or a call
Phone numberWhatsApp, or a call
The messages you send and the replies you receiveWhatsApp
Stay or booking details: dates, number of adults and children, room, requestsWhat you tell the desk in conversation
Call audio and a transcript, where the client uses our voice receptionistThe call. Every call says at the start that it is recorded
Business contact details of our clients and prospectsMeetings, email, WhatsApp

We do not buy contact lists, scrape, or track anyone across other websites. The system never asks for or stores ID documents or card numbers.

Why it is used

Who else touches it

WhoWhat they do
The client business you contactedSees your conversation and booking details in order to serve you.
Meta (WhatsApp)Carries the messages. Meta's own privacy terms apply to its side.
CloudflareHosts our software and the database that holds conversation records.
AnthropicClaude reads the conversation to understand what you need and draft a reply. Message text is sent for that purpose and is not used to train models.

We do not sell personal data or share it with anyone else. Some of these providers process data outside India, as permitted under the DPDP Act for countries not restricted by the Central Government.

Software and people

Replies are drafted by software working from facts the client has approved. Bookings are confirmed only by the client, and complaints, refunds, events and anything unusual are handed to the client's staff.

How long it is kept

Guest conversations are kept for as long as the client uses Dastak, then deleted within 90 days of the contract ending unless the client asks us to return or delete them sooner. Our own business records are kept as long as the law requires.

What you can ask for

Write to hello@dastak.co.in. If we don't resolve it, you can complain to the Data Protection Board of India.

This policy describes how the system works today. It has not yet been reviewed by an advocate.