Quickgick is a product of Brevity Technologies Private Limited (CIN U58200DL2024PTC433577), Room 419, 4th Floor, IIF, Netaji Subhas University of Technology, Azad Hind Fauj Marg, Dwarka Sector 3, Delhi 110078, India ("Quickgick", "we", "us").
This policy explains what personal data we handle, why, where it is kept, for how long, and what you can do about it. It is written for three groups of people: guests who message a hotel that uses Quickgick, on WhatsApp or through the hotel's guest web page; hotel staff and owners who use the Quickgick staff console; and visitors to quickgick.com. We follow India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it.
1. Who is responsible for your data
If you are a guest, the hotel you are staying with decides why and how your data is used. Under the DPDP Act, the hotel is the Data Fiduciary and Quickgick is its Data Processor: we handle your data on the hotel's behalf and on its instructions. For anything about your stay, contact the hotel first. You can also write to us (section 12) and we will pass your request to the hotel and help it respond.
If you are hotel staff, an owner or a website visitor, Quickgick is the Data Fiduciary for your account and contact details.
2. What we collect
Guests
| What | Where it comes from |
|---|---|
| Your phone number (stored encrypted) | WhatsApp, when you message the hotel |
| Your name, room, and arrival and departure dates | The hotel's booking records, its front desk, or you (for example, when you send your room number) |
| What you write to the hotel, and the text of your voice notes | You. Voice notes are turned into text; the audio is not kept |
| That you sent a photo, video or document, and any caption | You. We do not download or store the file itself |
| What you order or ask for, and what it costs | You and the hotel |
| Preferences and needs, such as diet, allergies, an occasion you are celebrating or the purpose of your trip | Your messages, the guest web page, and hotel staff |
| Your language, and whether you have agreed to, or asked not to, receive offers | You |
| Ratings, feedback and arrival plans you give on the guest web page, and your answers to offers | You |
| When the hotel's messages were delivered to you and read | |
| Notes the system makes about your stay, such as a late arrival or an open complaint, and whether a message was sent or held back and why | Quickgick, from the above |
| Details the hotel sends you, such as a driver's name and car number | Hotel staff |
The raw copy of each WhatsApp message as WhatsApp delivered it, which includes your WhatsApp profile name, is kept for 30 days and then removed (section 7).
Food allergies and dietary needs can reveal something about your health. They are recorded only when you or the hotel provide them, so the hotel can serve you safely.
Hotel staff and owners. Your name and work email; your role and team at the hotel; your sign-in (through Google, or an email and password, handled by Google Identity Platform); when you last signed in; and a record of what you do in the console, such as changing a price, a menu, a setting or a staff member, or taking over a conversation, with the time.
Website visitors. If you fill in a form on quickgick.com to apply for a pilot, request a demo or ask for an audit, we collect what you type (usually your name, email, phone number, hotel, role, location and message) and where you came from: the referring website, the first page you visited and any campaign tags in the link. quickgick.com sets no cookies and runs no analytics or advertising trackers (section 9).
3. Why we use it
| Purpose | Legal basis under the DPDP Act |
|---|---|
| Let the hotel answer your messages, take your orders and requests, send them to the right staff, and keep you updated | The hotel's lawful use for the service you asked for when you messaged it |
| Use AI to understand your messages, answer routine questions when the hotel has turned this on, translate, and send the rest to staff | As above |
| Remember your preferences during your stay and on a later stay at the same hotel | As above. You can ask the hotel to forget them |
| Send messages about your stay that the hotel has set up, such as a welcome or check-out information, within 24 hours of your last message | As above |
| Send offers and suggestions, such as dinner before the kitchen closes or a spa visit | Your consent, which you give by agreeing in the chat or on the guest web page. Reply STOP at any time to withdraw it |
| Show the hotel which messages led to orders, so it can measure what helped | The hotel's legitimate use, using data it already holds |
| Run staff accounts, keep the service secure, and keep a record of changes | Our legitimate use for providing the service, and legal obligations |
| Reply to website enquiries | Your consent, given when you submit the form |
| Invoice hotels and keep accounts | Contract and legal obligations (tax law) |
We do not sell personal data, we do not use it for advertising, and we do not use guests' messages to train AI models.
4. How AI is used
Quickgick uses AI models to read guest messages, recognise what is being asked and how urgent it is, translate messages and replies, turn voice notes into text, and, where the hotel allows, answer routine questions or draft offers. Preferences and needs you have shared, including dietary needs and allergies, are given to the model so its replies take them into account. The AI never tells a guest that a dish is safe for an allergy, never sets a price, and never marks a request as done.
Depending on the hotel's settings, offers the AI drafts are either recorded without being sent, approved by a person first, or sent within the hotel's rules (consent, quiet hours, a daily limit, and nothing promotional while a complaint is open). When the AI is unsure what a message means, it passes the message to hotel staff with your words. Staff can see every conversation and take it over at any time.
The models are Claude, by Anthropic, through Amazon Bedrock, for reading, translating and replying to messages; and Gemini, by Google, through Vertex AI, for turning voice notes into text. Under these providers' terms for these services, they do not use our data to train their models.
6. Where your data is kept
Our database, its backups and our servers are in India (Google Cloud, Mumbai). Some processing happens outside India: AI processing (section 4), staff sign-in, WhatsApp's own delivery, logs, and website hosting and email. The DPDP Act permits this except to countries the Government of India restricts, and we do not send data to those.
7. How long we keep it
| Data | How long |
|---|---|
| A guest's message text | 1 year after the guest's last departure from that hotel. The hotel may choose between 3 months and 3 years |
| Preferences and needs learned about a guest | 2 years after the guest's last departure. The hotel may choose between 3 months and 5 years |
| What the AI was shown and what it answered | 90 days. The hotel may choose between 30 days and 1 year |
| The raw copy of each message as WhatsApp delivered it | 30 days |
| Server and application logs | Up to 30 days |
| Backups of the database | Up to 30 days, after which they are overwritten |
| A guest's name, encrypted phone number, records of consent, and requests and orders | Not yet removed automatically. We remove them when you ask (see delete your data), and anonymise them when a hotel leaves Quickgick |
| Staff accounts | Access ends as soon as the hotel removes you. Your account details are kept until you ask us to delete them. The record of changes you made is kept for the hotel's history |
| Invoices to hotels | As long as Indian tax law requires (usually 8 years) |
| Website enquiries | In our email for up to 2 years after our last contact, unless you become a customer |
Nothing about a guest is removed while they have a booking or are staying at the hotel. When message text is removed, we keep only that a message was sent at a certain time, with its words cleared.
8. How we protect it
- Data is encrypted in transit and at rest. Phone numbers have an extra layer of encryption, with keys kept outside the database.
- Each hotel's data is kept apart from every other hotel's by the database itself, not only by our code, and a guest is never matched across hotels.
- Staff see only the hotel they work at, and only what their role allows.
- Changes to prices, menus, staff and settings are recorded, and the record cannot be edited afterwards.
- Our application logs leave out phone numbers, email addresses and access tokens.
- If a breach affects your data, we will tell the hotel without undue delay, and the hotel and we will inform the Data Protection Board of India and the people affected as the DPDP Act requires.
9. Cookies and browser storage
Quickgick sets no cookies and runs no analytics or advertising trackers, on the website or in the product. Some things are kept in your own browser so the pages work:
- quickgick.com: where you arrived from, for the current visit only, sent to us only if you submit a form; which articles you have read; and a currency choice on a sample page.
- The guest web page: your access to your stay (for up to a day at a time), your colour theme, and your basket.
- The staff console: your signed-in session, and alert settings. If you allow it, the console shows browser notifications for new requests.
You can clear this storage in your browser settings at any time.
10. Your rights
Under the DPDP Act you can:
- ask what data is held about you, and who it has been shared with;
- ask for it to be corrected or completed;
- ask for it to be erased, unless the law requires us or the hotel to keep it;
- withdraw your consent at any time. To stop offers and suggestions from a hotel, reply STOP (or "band karo") on WhatsApp, or change your choice on the guest web page. You may still receive messages about your stay, such as replies to your requests. Withdrawing does not affect anything done before;
- nominate someone to exercise these rights for you if you die or become unable to;
- complain to us (section 12), and if you are not satisfied, to the Data Protection Board of India.
To have your data deleted, see delete your data. We reply within 30 days. We may ask you to confirm your identity first, for example by replying from the WhatsApp number in question.
11. Children
Quickgick is not meant for children. A hotel should not let a child under 18 use it without a parent or guardian. If we learn that we hold a child's data without verifiable parental consent, we will delete it.
12. Changes to this policy
If we change this policy, we will update the date at the top. If a change matters, we will tell hotels before it takes effect.
13. Contact and grievance officer
Grievance officer: Binit Gupta, Brevity Technologies Private Limited
Email: hello@quickgick.com (subject: Privacy) · Phone: +91 89207 96562
Post: Room 419, 4th Floor, IIF, Netaji Subhas University of Technology, Azad Hind Fauj Marg, Dwarka Sector 3, Delhi 110078, India