Privacy Policy
Privacy Policy
Effective Date: June 25, 2026 Last Updated: June 25, 2026
1. Introduction This Privacy Policy describes how Evegram Inc. ("we", "us", "our", or "Evegram Hotels") collects, uses, and discloses information, including personal data, in connection with your use of our website (https://hotels.evegram.org), services, multi-vendor booking features, the Evegram Messenger mobile application, and related online tools (collectively, the "Platform"). We are committed to ensuring transparency, security, and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) (EU 2016/679) and the California Consumer Privacy Act (CCPA/CPRA). For the purpose of the GDPR, Evegram Inc. acts as the Data Controller for platform operations, while individual hotel operators ("Vendors") act as independent Data Controllers for the data required to fulfill your specific room reservations.
2. Legal Basis for Processing (GDPR Compliance) We only process your personal data when we have a valid legal basis to do so:
Performance of a Contract: To process and secure your hotel bookings and enable multi-vendor communication.
Consent: For sending marketing communications, deploying non-essential cookies, or using precise geolocation.
Legitimate Interests: To maintain platform security, prevent fraudulent bookings, and optimize our services.
Legal Obligation: To comply with tax, accounting, and anti-money laundering laws, or local tourism reporting authorities.
3. Information We Collect We collect information through your direct interactions, automated technologies, and trusted third parties.
A. Personal Data You Provide Voluntarily:
Account & Profile Information: Name, email address, phone number, password, and registration details (for both Guests and Vendors).
Booking & Financial Data: Check-in/check-out dates, guest counts, room preferences, and encrypted payment details processed via our secure multi-vendor gateway.
Communication Data: Messages, chats, and notifications sent directly through Evegram Messenger between guests and hotel owners.
B. Data Collected Automatically:
Device & Usage Data: IP address, browser type, device type, operating system, unique device identifiers (for Firebase push notifications), and interaction history on our Platform.
Location Data: Approximate or precise location data if enabled on your mobile device, used exclusively to show nearby hotel spots.
Cookies & Tracking: Data collected via cookies, web beacons, and pixels to store session states and preference settings.
4. How We Use Your Information We use the collected data for the following specific purposes:
Booking Fulfillment: To process transactions, manage multi-vendor listings, and verify host-guest agreements.
Real-Time Communication: To power Evegram Messenger, delivering instant notification alerts, check-in details, and automated customer support.
Platform Security: To detect and prevent security breaches, fraudulent reservations, or malicious activity.
Marketing & Analytics: To send curated hotel offers and newsletters (only with explicit opt-in consent) and to monitor platform performance.
5. Data Sharing and Multi-Vendor Disclosures To operate a functional multi-vendor ecosystem, your information may be shared with:
Hotel Vendors: We transfer necessary personal data (name, contact info, booking dates) to the specific hotel property you booked, enabling them to fulfill your stay.
Third-Party Service Providers: Trusted partners assisting in payment processing (Gateways), push notifications (Firebase), and infrastructure hosting. These processors are strictly bound by Data Processing Agreements (DPAs) to protect your data.
Legal Authorities: When required by law, subpoena, or government regulation to protect the rights, property, and safety of Evegram Inc., our users, or the public. We never sell, rent, or trade your personal data to third parties for commercial marketing purposes.
6. International Data Transfers Evegram Hotels operates globally. Your data may be transferred to, and processed in, countries outside the European Economic Area (EEA), including the United States. Whenever we transfer personal data cross-border, we ensure a similar degree of protection is afforded by utilizing Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Retention We retain your personal data only for as long as necessary to fulfill the purposes outlined in Section 4. Account data is retained until you request deletion. Booking records are stored for up to 10 years to comply with local financial, tax, and regulatory compliance obligations. Chat logs within Evegram Messenger are securely retained to ensure business continuity and dispute resolution between guests and vendors.
8. Data Security Measures We implement comprehensive technical and organizational security protocols—including HTTPS encryption, SSL protocols, firewalls, and tokenized payment processing—to shield your data against unauthorized access, loss, or alteration. However, no internet-based transmission can be guaranteed as 100% secure.
9. Your Privacy Rights (GDPR & CCPA/CPRA) Depending on your geographical location, you hold specific statutory rights regarding your personal data:
Right of Access & Rectification: You can request a copy of your personal data and correct any inaccuracies.
Right to Erasure ("Right to be Forgotten"): You can request the permanent deletion of your data, subject to legal retention overrides.
Right to Data Portability: You can request your data in a structured, machine-readable format.
Right to Object & Restrict Processing: You may object to data processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: You can revoke your consent at any time for analytical or promotional tracking. To exercise any of these rights, please contact our Data Protection Team at support@evegram.org. We will respond to your request within 30 days.
10. Changes to This Privacy Policy We reserve the right to modify this Privacy Policy at any time. Any revisions will be published on this page with an updated "Effective Date". For significant amendments, we will issue a prominent alert within the Platform or directly contact registered users via email.
11. Contact Information If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please reach out to us: Evegram Inc. San Francisco, California 94108, US Email: support@evegram.org Website: https://hotels.evegram.org