1. Who We Are
Cloudhut ("we", "us", "our") is a hotel management platform operated by Madras Labs LLC. This policy covers all Cloudhut products: the Cloudhut desktop app (macOS and Windows), our website cloudhut.io, Cloudhut PMS (property management system) and Cloudhut Signage (digital signage for Android TV).
2. What We Collect
Cloudhut (desktop app)
The app reads your OTA extranets (such as Agoda, Booking.com and Goibibo / MakeMyTrip) on your own computer, in your own signed-in sessions. Your OTA logins, passwords and sessions never leave your computer, and the bookings, payouts and promotions the app reads are stored on that computer, not on our servers. We receive:
- Licence information — the email address on your licence or trial, an install ID that identifies each computer the licence is used on, and the app version and operating system. The app checks its licence with us about once an hour.
- Support messages — what you write in Support, with the app version and the screen you were on.
- Session recordings of the app's own window — to support you, the app records its screens (including the figures and booking details they show) and sends them to our own recording server, linked to your licence email. Our support team can also view the app's window live, and can call you or take control of it only after you accept. The OTA pages you sign in to are shown in a separate view and are not recorded.
- Data sent to learn and repair OTA pages — when you add an OTA the app does not yet read, or an OTA changes a page and the app cannot read it, the app may send parts of that OTA page — which can include booking details — through our servers to Anthropic's Claude, to learn or repair the read. Your OTA logins and sessions are never sent.
- Payment details — handled by Stripe. We do not see or store card numbers.
Our website (cloudhut.io)
- Visit statistics — Google Analytics counts visits and the pages viewed. See Cookies and analytics below.
- Session recordings of the home page — how visitors scroll and click on cloudhut.io's home page, recorded on our own server, to improve the page.
- Account details — the email address you sign up or sign in with.
Cloudhut PMS
- Staff account information (name, email, role)
- Guest booking data (name, phone, email, ID documents) — entered by hotel staff
- Payment records and financial data
- Hotel operational data (rooms, rates, availability)
Cloudhut Signage (Android TV App)
- Device MAC address — collected on first connection to enable Wake on LAN functionality (waking TVs remotely over the local network)
- App version — to track which version is running on each screen
- Device user agent — to identify the Android TV model and OS version
- Connection status — online/offline state and last seen timestamp
The Signage app does not collect personal data from hotel guests. It does not use cameras, microphones, location services, or advertising identifiers. It does not track browsing activity or share data with third parties.
3. How We Use Data
- Desktop app licence data is used to activate the app, check the licence and limit it to the computers it covers; support messages and app recordings are used only to help you and to fix problems
- Website statistics and home page recordings are used only to understand how the site is used and to improve it
- PMS data is used solely to operate the hotel management system for the subscribing property
- Signage device data is used to manage screen connections, push content updates, and enable remote device management
- MAC addresses are used exclusively for Wake on LAN — waking TVs over the hotel's local network when guests check in
- We do not sell or rent data, and we do not share it with anyone for advertising or marketing
4. Cookies and Analytics
cloudhut.io uses Google Analytics, which sets cookies, to count visits. In the European Economic Area, the United Kingdom and Switzerland, analytics cookies are off until you choose Accept in the cookie bar; before you choose, Google counts the visit without cookies. You can change your choice at any time with Cookies at the bottom of any page. We do not use advertising cookies. The desktop app does not use Google Analytics.
5. Service Providers
We use these providers to run our products. Each receives only what its job needs:
- Cloudflare — hosting, databases, file storage and email delivery
- Stripe — subscriptions and payments
- Google Analytics — website visit statistics
- Anthropic (Claude) — the model that learns and repairs how the desktop app reads OTA pages
Session recordings, of the website and of the desktop app, are kept on our own recording server and are not shared with a third party.
6. Where Data is Stored
Data the desktop app reads from your OTAs stays on your computer. Everything else we hold is stored on Cloudflare's global network using D1 (SQLite) databases and R2 object storage. PMS data is stored in region-specific databases (APAC for Indian properties). Signage device data is stored in a shared database accessible only by authorised property workers.
7. Data Retention
Hotel operational data is retained for the duration of the property's subscription plus 90 days. Desktop app licence and install records are kept while your licence is active and deleted on request. Session recordings are kept for a limited period and deleted on request. Signage device records are deleted when a screen is removed from the dashboard. Guest booking data is retained as required by local regulations (including GST compliance requirements in India).
8. Data Security
All data is transmitted over HTTPS/WSS (TLS 1.3). API access requires authentication via JWT tokens. The Signage app communicates exclusively with our servers over encrypted WebSocket connections. Device tokens are stored locally on the Android TV and are not shared.
9. Data Deletion
You can request deletion of your data at any time:
- Signage devices: Hotel administrators can delete any screen from the Cloudhut PMS dashboard (Signage → Screens → Delete). This immediately removes all device data including MAC address, connection history, and content assignments.
- Desktop app: What the app reads from your OTAs is stored only on your computer, so deleting the app and its data there removes it. To delete your licence records, support messages or recordings, email support@cloudhut.io.
- Property data: Property owners can request export or deletion of all their data by emailing support@cloudhut.io.
- Full account deletion: To delete all data associated with your property, contact support@cloudhut.io. We will process your request within 30 days.
10. Children's Privacy
Cloudhut products are B2B tools for hotel operations. They are not directed at children under 13, and we do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of our products after changes constitutes acceptance.
12. Contact
For privacy-related questions or data requests, contact us at:
Email: privacy@cloudhut.io
Website: cloudhut.io