Privacy Policy
Last updated: 11 October 2026
This Privacy Policy describes how JASWINDER SINGH, Proprietor of TREEO HOTELS AND TRAVELS INC., a sole proprietorship which operates the Treeo Hotels booking platform (“Treeo Hotels”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use the website https://treeohotel.com (the “Platform”). We operate in India and your personal data is primarily stored and processed in India. By using the Platform or making a booking, you agree to this Policy. If you do not agree, please do not use the Platform.
1. Information we collect
- Booking & contact details — name, email address, phone number, and where relevant your city/country and address, provided when you register or make a reservation.
- Reservation details — property, room, dates, number of guests, meal plan, and related preferences.
- Identity documents — where a property requires ID for check-in, any document you choose to upload.
- Payment information — payments are processed by our third-party payment gateway (PhonePe) and/or the property. We do not store your full card number, CVV, UPI PIN, or net-banking credentials. We may retain limited transaction references (e.g. amount, status, transaction ID) to manage your booking.
- Usage data — the pages you open on the Platform and when, your device and browser type, how you reached us (for example a search engine, social media or an advertisement), and your IP address, from which we estimate your approximate city and region. A random identifier stored in your browser lets us count distinct visitors; it does not identify you. We use this only to understand and improve how the Platform is used. IP addresses are deleted after 30 days. IP-based location is provided by DB-IP (db-ip.com).
We will never ask for your card PIN, OTP, UPI PIN, or net-banking password by phone or email. If someone claiming to be Treeo Hotel requests these, do not share them and report it to us.
2. How we use your information
- To create and manage your reservations and communicate confirmations, changes, cancellations, and reminders (by email, SMS, WhatsApp, or phone).
- To process payments and refunds through our payment gateway and the property.
- To provide customer support and resolve disputes.
- To detect and prevent fraud and misuse, and to comply with legal obligations.
- To improve the Platform and, where you have not opted out, to send you relevant offers and updates.
3. How we share your information
- With the property you book, so it can honour and service your reservation.
- With service providers such as our payment gateway (PhonePe), and communication/hosting providers, strictly to deliver the Services.
- With authorities where required by law, or to enforce our terms, or to protect the rights and safety of users and the public.
We do not sell your personal data.
4. WhatsApp communications
Messages from Treeo Hotels. We use our own WhatsApp Business number to send you booking confirmations, updates and other service messages described in section 2, and to send new-booking alerts to the property you booked. WhatsApp is provided by Meta; messages sent through it are also subject to WhatsApp’s own terms and privacy policy.
Properties that connect their own WhatsApp Business Account. A property listed on Treeo Hotels may choose to connect its own WhatsApp Business Account to the Treeo Hotels platform, using Meta’s authorisation (Embedded Signup) flow. Only the property can authorise this connection, and it does so for its own account. When it does:
- We receive and store the information needed to operate the connection for that property — such as the WhatsApp Business Account ID, the business phone number and its ID, the business display name, and an access token issued by Meta. The access token is stored encrypted on our servers and is never shown in the Platform or sent to your browser.
- We use that account and its business assets (such as its phone number and message templates) only as necessary to provide the Treeo Hotels services the property has asked for — for example guest enquiries, booking-related messages, booking confirmations, payment-related messages, customer service and other communication between the property and its guests. We do not use it for any other purpose.
- The WhatsApp Business Account, its phone number, templates and other business assets remain the property’s own. Treeo Hotels does not own them.
- Our access depends on the authorisation the property gave through Meta. It is not permanent: it ends when the access token expires or is revoked, when the property disconnects the account from its Treeo Hotels settings, or when the property removes Treeo Hotels’ access in its Meta business settings. When a property disconnects, we delete the stored access token.
- Each property’s connection is kept separate: one property cannot see or use another property’s WhatsApp account, number or credentials.
- If you message a property on its connected WhatsApp number, the property is responsible for how it uses your messages for its own purposes; Treeo Hotels processes them only to provide the Platform services to that property, as described in this Policy.
5. Security
We adopt reasonable security practices and procedures to protect your personal data from unauthorised access, loss, or misuse. Payment transactions are handled over secure, PCI-DSS compliant gateways. However, transmission of information over the internet is not completely secure, and you use the Platform at your own risk in this respect. You are responsible for keeping your account login credentials confidential.
6. Data retention and deletion
We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. You may request deletion of your account and associated data by writing to us at the contact below. We may retain certain data where needed to complete a pending booking, process a refund, resolve a dispute, or prevent fraud, and may keep anonymised data for analytics.
7. Your rights
You may access, correct, or update your personal data through the Platform or by contacting us. You may withdraw a consent you previously gave by writing to us with the subject line “Withdrawal of consent for processing personal data”. Withdrawal is not retrospective, and we may be unable to provide certain Services without the necessary information.
8. Changes to this Policy
We may update this Privacy Policy from time to time. Please review this page periodically. Significant changes will be notified as required by applicable law.
9. Grievance Officer & contact