Legal
Privacy Policy
What we collect, why, who sees it, and how to have it deleted. This covers this website and the StayHub and StayHub Broker apps — on your phone and on the web at app.thestayhubs.com and broker.thestayhubs.com.
Last updated 9 October 2026
1. Who is responsible
DevQuotient is the data fiduciary for the personal data described here, under the Digital Personal Data Protection Act 2023.
DevQuotient is a proprietorship owned by Arpit Sharma. Registered office: Raipur, Chhattisgarh – 492013, India. GSTIN 22HTZPS1732L1ZW · Udyam UDYAM-CG-14-0135714.
In short: we collect your phone number and what you choose to tell us about yourself, the home you want, or the property you are letting. We do not ask for an email address or a password. We do not sell personal data.
2. What we collect
Your mobile number. Required — it is how you sign in.
Your profile. Your name, and optionally an alternate phone number, an address, a profile photo and a short bio.
If you are a broker: your business name, the areas you serve and your service location, your RERA registration number if you give it, and the documents you upload for verification (a government ID and, if you have one, a RERA certificate).
What you list. Property details, rent, deposit, address, location, photographs and videos. Brokers may also record the landlord's name and phone number.
What you are looking for. The localities, budget, move-in date, property type, number of occupants, pets, tenant type and any notes in a requirement, and the properties you save.
Enquiries, messages and reports. Enquiries owners send to brokers; messages you send in chat; reports you make about a conversation or listing. Brokers can also keep notes and visit records about the tenants they work with.
Credits and payments. Your credit balance, what credits were spent on, and records of purchases — amount, date and the payment reference from our payment partner.
Device and usage information. A push notification token, an identifier for your app installation, your device platform, and — for each signed-in session — the IP address and device details. We also record how the apps are used (for example, a listing viewed, a requirement posted, a contact unlocked) in our own systems, to run and improve StayHub.
3. What we do not collect
No email address and no password. Sign-in is a code to your phone.
No card or bank details. Payments are made on Cashfree's secure checkout; card and UPI details go to them, not to us.
No location, contacts, camera or microphone. The apps do not read your device's location, your contacts, your camera or your microphone. Location on a listing or requirement is what you type or pick.
No third-party analytics or advertising trackers in the apps or on this website.
4. Phone permissions the apps use
Photos and media — only when you choose photos to add to a listing, your profile or a verification request.
Notifications — to tell you about new messages, leads, unlocks and account activity. You can turn types of notification off, and set quiet hours, in the app.
5. Why we use it
To create your account and sign you in. To show listings, match requirements with brokers, and deliver unlocks, messages and notifications. To review listings and verify brokers. To sell and track credits. To handle reports, prevent fraud and enforce the Terms. To fix faults and improve the apps. To meet our obligations under Indian law.
We rely on your consent, given when you create an account and when you post a listing, requirement or enquiry, and on the legitimate uses the DPDP Act allows, such as keeping the service secure and complying with the law. We do not use your data for advertising.
6. Who can see what
Anyone can see a live listing — its details, photographs and the address entered — including people without an account. The lister's contact details are shown only to tenants who unlock them.
Brokers who serve the area see the details of a requirement you post, but not your name or number. A broker who unlocks it sees your name and number. At most eight brokers can unlock one requirement.
Brokers you send an enquiry to see the property details; one who unlocks it sees your name and number.
People you message see your name, profile photo and what you send them.
Our staff can see account, listing, verification and payment records where they need to — to review listings and brokers, answer support requests, investigate reports and fix faults. Administrative actions are logged.
8. How long we keep it
Sessions. Signing in gives a 15-minute access token and a 30-day refresh token. After 30 days without using the app you are signed out, and session records, including IP address and device details, are deleted.
Requirements stop being shown to brokers when they expire or you close them.
Your account is kept while it is open.
When you delete your account, you are signed out everywhere, and at once: your phone number, name, alternate phone, address, profile photo, bio and verification documents are removed; your listings come down; your requirements stop reaching brokers; and saved listings, devices and notifications are deleted. A broker account's agency leaves the directory. Some records are kept: payment and credit records, for as long as tax law requires; messages already delivered to other people; a lead or enquiry a broker already unlocked, which keeps the name and number it showed them; and an anonymised account record with security logs. The full list is at thestayhubs.com/delete-account.
Technical logs — server records of requests and errors — are kept only as long as needed to run, secure and fix the service, and are then deleted.
9. How we protect it
Data is encrypted in transit. On a phone your sign-in tokens are kept in its secure storage (Keychain on iOS, Keystore on Android); in a browser, in that browser's storage for our site. Verification documents are stored privately and opened by staff through short-lived links. Our database is access-controlled.
No system is perfectly secure. If a breach is likely to affect you, we will tell you and the Data Protection Board of India as the DPDP Act requires.
10. Your rights
Under the Digital Personal Data Protection Act 2023 you may: ask what we hold about you and who it has been shared with; correct or complete it; ask us to erase it; withdraw consent, which for most of what we do means closing your account; nominate someone to exercise these rights if you die or become unable to; and complain, first to us and then to the Data Protection Board of India.
You can edit your profile and delete your account yourself in the app (Profile → Security), or ask us by email (see thestayhubs.com/delete-account). For anything else — including a copy of your data — contact the Grievance Officer below. We respond within 30 days and will not charge for a reasonable request.
11. Children
StayHub is not for anyone under 18, and we do not knowingly collect data about children. If we learn an account belongs to a child, we close it.
13. Grievance Officer
For anything about your personal data, or to exercise a right above:
Arpit Sharma, Grievance Officer DevQuotient, Raipur, Chhattisgarh – 492013, India Email: [email protected] Phone: +91-8770386959
We acknowledge within 24 hours and aim to resolve within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.
14. Changes
If we change this policy in a way that materially affects you, we will tell you in the app before it takes effect.
This version is dated 9 October 2026.