Privacy Policy

1. Introduction

Welcome to Hostanova Pro, operated by Codexmark ("we," "our," or "us"), accessible via https://hostanova.shahdawood.com. We provide a hotel management system (Property Management System) and automated payment tools for hotels and hospitality operators. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our platform, including optional Google Gmail integrations.

2. Information We Collect

• Account & Contact Information: Name, business email, phone number, property details, and authentication credentials.
• Hotel Operations Data: Reservations, guest folio / invoice data, payments, room status, maintenance inspection records (including photos you attach to reports), and related operational records you create in the system. Invoice and payment records are hotel business records, not a consumer banking or lending product.
• Staff communications: Chat messages, photos or short videos you attach, voice notes, and optional staff voice-call metadata when you use those features.
• Device & app (Android / web): Notification permission for staff alerts; microphone for voice calls and voice notes; camera when you take or attach photos (and short videos in staff chat) for chat, maintenance inspection reports, profile photos, and other in-app image uploads you choose. On the official Android app, a device topic is used only to deliver Hostanova-branded alerts while the app is in the background. We do not access your photo library in bulk, run the camera in the background, or request SMS, contacts, or location. Photos and videos are chosen through the system picker (or taken with the camera) one file at a time.
• Google User Data (Gmail Integration): Only when you explicitly connect a Gmail account via Google OAuth 2.0:
  • Your Gmail address (https://www.googleapis.com/auth/userinfo.email).
  • Read-only message access (https://www.googleapis.com/auth/gmail.readonly) to process (a) bank RAAST / credit alerts for payment reconciliation and (b) OTA booking confirmation emails for reservation import.

3. How We Use Google User Data & Gmail Access

Gmail access is used exclusively for the prominent user-facing features below — in accordance with the Google API Services User Data Policy Limited Use requirements.

4. Data Sharing & Third Parties

We do not sell, rent, or monetize Gmail data. Transfer is limited to what is necessary to operate the features (e.g. cloud hosting), comply with law, or as part of a merger, acquisition, or sale of assets — consistent with Limited Use.

• Infrastructure: Hosting and storage providers bound by confidentiality obligations.
• Legal: When required by enforceable legal process.

5. Data Security & Storage

• Traffic is encrypted in transit with HTTPS / TLS.
• Google OAuth tokens are stored securely and used only to call Gmail APIs.
• Access to production systems is role-restricted and audited.

6. Data Retention, Revocation & Deletion

• Revoke in-app: Disconnect Gmail anytime under Integrations → Gmail.
• Revoke via Google: Google Account permissions.
• Token deletion: Disconnecting removes stored OAuth tokens for that inbox from our servers.
• Account deletion (in-app): Sign in, open Profile, choose Delete my account, and confirm. You can also follow https://hostanova.shahdawood.com/account-deletion. Deletion deactivates your login immediately. Hotel operational records remain with the property for legal and accounting purposes.
• Help: Email admin@shahdawood.com if you cannot access the in-app control.

7. Children

Hostanova Pro is hotel management software for adult hospitality staff and operators. It is not directed at children and is not part of Google Play's Designed for Families program. We do not knowingly collect personal information from children under 13 (or the equivalent age of digital consent in your country).

8. Official Android app

The Android app is the official Hostanova Pro client published by Codexmark (package com.shahdawood.hostanova). It loads our own service at https://hostanova.shahdawood.com and adds native staff alerts, microphone access for voice features, and camera access so staff can take photos for chat and maintenance inspection reports. It is not a third-party browser wrapper or affiliate app.

9. User-generated content

Staff chat (including photos and short videos you attach) is visible to other authorized users at the same hotel. Hotel administrators can moderate or remove access. Do not post illegal content. We may suspend accounts that violate these Terms.

10. Contact Us

Privacy and Google integration questions: