Privacy Policy

What we collect, why we collect it, how long we keep it, and what you can ask us to do with it.

Last updated 8 August 2026

Who is responsible

Choice Tonight, [REGISTERED OFFICE ADDRESS, CITY, STATE, PIN], is the data fiduciary (under India's Digital Personal Data Protection Act, 2023) and data controller (under the GDPR) for personal data processed through Choice Tonight. Privacy questions go to privacy@choicetonight.com.

What we collect

Data	Where it comes from
Name, email address, password (stored hashed, never in plain text)	You, at registration
Listing content — title, description, category, location, rates, availability, photographs	You, when you post
Moderation record — approval or rejection, reason, reviewer, timestamp	Generated when a moderator reviews your listing
Session cookie	Set when you log in
Server logs — IP address, browser, pages requested, timestamps	Automatically, when you use the site

We do not collect payment card details, because we do not process payments. We do not knowingly collect data from anyone under 18.

Why we use it, and on what basis

To run your account and publish your listings — performance of our contract with you.
To review listings and enforce our rules — our legitimate interest in keeping the directory safe and lawful.
To keep the service secure and investigate abuse — legitimate interest, and legal obligation where we must retain or disclose records.
To respond when you contact us — legitimate interest in answering you.

We do not sell personal data, and we do not use it for automated decision-making that produces legal effects.

What is public

An approved listing is public. Its title, description, category, location, rates, availability, photographs and the display name of its owner are visible to anyone, and can be indexed by search engines. Your email address and password are never shown publicly. Treat anything you type into a listing as published.

Who we share it with

Hosting and infrastructure — our application host and database provider, who process data on our instructions.
Image storage — uploaded photographs are stored with our file storage provider.
Authorities — where we are legally required to disclose, or where disclosure is necessary to protect someone from harm.

Some providers operate outside India. Where data leaves the country we rely on the transfer safeguards those providers offer, such as standard contractual clauses.

How long we keep it

Account data — while your account is open, then deleted or anonymised within 90 days of closure.
Listings — until you delete them or your account closes.
Moderation and abuse records — up to 3 years, so that repeat offenders can be recognised.
Server logs — typically 30 to 90 days.

Security

Passwords are hashed with bcrypt and are not recoverable by us or by anyone with database access. Traffic is served over HTTPS, and database connections are encrypted. Administrative functions are restricted to moderator accounts, and every approval and rejection is attributed to the moderator who made it. No system is perfectly secure, so please use a password you do not reuse elsewhere.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent, you can withdraw it at any time. Under the DPDP Act you may also nominate someone to exercise these rights on your behalf if you die or become incapacitated.

Email privacy@choicetonight.com and we will respond within 30 days. If you are in the EU or UK, see our GDPR page for how these rights apply and how to complain to a supervisory authority.

Cookies

We use a small number of cookies, described in our Cookie Policy.

Complaints

Our grievance officer is [GRIEVANCE OFFICER NAME], reachable at grievance@choicetonight.com or [+91 XXXXX XXXXX]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

Changes

We will update this page when our practices change and revise the date at the top. Material changes will be announced on the site.

What we collect

Data

Where it comes from

Name, email address, password (stored hashed, never in plain text)

You, at registration

Listing content — title, description, category, location, rates, availability, photographs

You, when you post

Moderation record — approval or rejection, reason, reviewer, timestamp

Generated when a moderator reviews your listing

Session cookie

Set when you log in

Server logs — IP address, browser, pages requested, timestamps

Automatically, when you use the site

We do not collect payment card details, because we do not process payments. We do not knowingly collect data from anyone under 18.

Why we use it, and on what basis

To run your account and publish your listings — performance of our contract with you.

To review listings and enforce our rules — our legitimate interest in keeping the directory safe and lawful.

To keep the service secure and investigate abuse — legitimate interest, and legal obligation where we must retain or disclose records.

To respond when you contact us — legitimate interest in answering you.