Privacy Policy

Effective Date: September 12, 2025

19thCross Media & Technologies Pvt. Ltd. ("Zitlin," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you:

  • Visit our websites at https://zitlin.com, https://app.zitlin.com, and https://server.zitlin.com
  • Use our property management software, including our Android mobile application, MacOS desktop application
  • Interact with us in other ways

By using the Service, you agree to the practices described here. Questions? Contact us at [email protected].

1. Information We Collect

Information you provide directly

  • Account registration: name, email address, phone number, business name, and property details
  • Property configuration: room types, menus, pricing, inventory
  • Booking and guest information: guest name and contact number. Guest address and email are optional
  • Communications: emails or messages you send us

Information collected automatically

  • Login events: IP address, user agent, timestamp, and device information recorded on account login and key actions (booking creation, etc.) for security and audit purposes
  • Website traffic: IP address, requested path, response codes, and timestamps logged by Cloudflare at the network level
  • Website analytics: aggregated, anonymised usage data via Google Analytics (website only, not inside the app)
  • Cookies: used to maintain sessions and remember preferences

Payment-related information When you activate the optional Zitlin Booking Engine:

  • UPI IDs (for UPI QR code generation)
  • PayPal ID
  • Bank account details like account number, IBAN, BIC, etc.

These information is stored solely to collect payments from guests for offline payments when they book a room.

What we do not collect

  • We do not use third party analytics or tracking inside our client apps: https://app.zitlin.com , Android App, macOS app
  • We do not collect health data
  • We do not sell, rent, or share personal data with third parties for marketing purposes

2. How We Use Your Information

  • To provide and operate the Service
  • To communicate with you about your account or the Service
  • To improve the Service through anonymised website analytics
  • To comply with legal obligations
  • To send optional product update emails (you can opt out any time)

3. How We Share Your Information

We do not sell or share your personal data with third parties for their own purposes.

We use the following sub-processors who may process data on our behalf:

  • DigitalOcean (Netherlands, EU) — hosting, database, and CDN. All data is stored on servers located in the Netherlands, European Union
  • Cloudflare — traffic routing, DDoS protection, and caching. Web traffic passes through Cloudflare's network
  • Google Analytics — anonymised, aggregated website usage analytics only. No guest data, booking data, or personally identifiable information is shared with Google Analytics
  • Mailgun (EU) — transactional email delivery (booking confirmations, account emails)

We may disclose information if required by law or to protect our rights and safety.

4. Data Storage and International Transfers

Your data is stored on servers located in the Netherlands, European Union, operated by DigitalOcean. EU-based hosting means your data is protected under EU data protection standards.

If you access the Service from outside the EU, your data is processed and stored within the EU.

5. Data Security

We implement administrative, technical, and physical safeguards to protect your information. No system is completely secure and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

6. Data Retention and Your Rights

Retention: We keep your data for as long as your account is active or as needed to provide the Service. Guest information is retained to support repeat bookings and is deleted upon account deletion.

Your rights:

  • Access and correction: View or update your information through your account settings
  • Deletion: See our Account Deletion page. We delete all data within 7 working days of a valid request
  • Opt-out: Unsubscribe from non-essential emails via the unsubscribe link or by emailing us
  • GDPR rights (EU/EEA users): You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact [email protected] to exercise these rights

7. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect information from minors. If we learn we have done so, we will delete it promptly.

8. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify you without undue delay in accordance with applicable law. Notification will include the nature of the breach, data affected, likely consequences, and steps we are taking to address it.

9. Changes to This Privacy Policy

We may update this Policy from time to time. We will notify you of material changes by posting the updated version on the Site and updating the Effective Date. Continued use of the Service after changes constitutes acceptance.

10. Contact Us

For privacy questions or to exercise your rights:

Email: [email protected]
Post: 19thCross Media & Technologies Pvt. Ltd., Rabindranagar, Medinipur, West Bengal — 721101, India

      Chat