Legal

Privacy Policy

Last updated: 3 November 2026

What we collect

Your account details (name, email, password hash), the bookings you add (hotel, dates, room type, price), price-check history, and optional push-notification subscriptions. Waitlist emails are stored separately.

What we don't do

We never ask for your email inbox access, your travel-account passwords, or your payment card. We don't sell your data. Price checks query public hotel prices — we don't log in anywhere on your behalf.

Who else sees data

Price data comes from our pricing provider (RapidAPI/Booking.com data). Hosting is on Vercel and Neon (PostgreSQL). They process data only to run the service. We share nothing for advertising.

Retention & deletion

You can delete any watch at any time (this removes its price history). Want your whole account gone? Use the contact channel on your invite email and we'll erase it — backups included — within 30 days.

Your rights (India — DPDP Act)

You can access, correct, or delete your personal data, and withdraw consent. Contact us via your invite email and we'll respond within the statutory timelines.

Cookies

We use a single session cookie to keep you logged in. No advertising or cross-site tracking cookies.

Grievance officer

Per Indian consumer and data-protection requirements, complaints are acknowledged within 48 hours and resolved within 30 days. Contact the grievance officer at welcome.bookforward@gmail.com with "Grievance" in the subject line.