Your guests' data, locked like a bank's. Signing in stays one tap.

Why this matters for a small property

A homestay or small hotel holds more sensitive data than most small businesses: passport numbers, visa details and photos of ID cards for every guest. A notebook in a drawer or ID photos sitting in a staff member's WhatsApp gallery are the usual weak points. InnRow keeps those details in one place, encrypted, and limits who can open them.

Guest data, encrypted

• Encrypted at rest with AES-256: ID, passport and visa numbers, dates of birth, ID photos and the server's backup copies. A stolen database or backup shows only scrambled text.
• A separate key for every property. Each value is bound to its property and field, so a copied value won't open anywhere else.
• Staff see everything as before. Nothing changes at the front desk.
• ID photos delete themselves 1 year after check-out. The owner can choose anything from 30 days to 3 years, or never.
• Opening an ID photo is logged.
• Uploads are cleaned: photos are re-encoded, which strips hidden data such as GPS location, and PDFs carrying scripts or hidden files are refused.

Signing in: safer, and still quick

• Passkeys: sign in with your fingerprint, face or phone PIN. No password to type and no code, and a passkey can't be phished.
• Two-step sign-in: use a passkey or an authenticator app such as Google or Microsoft Authenticator, with recovery codes for a lost phone. "Trust this device for 30 days" means a trusted phone isn't asked again for a month.
• The owner decides: two-step sign-in can stay optional, or be required for the owner, for managers or for everyone, in Settings → Security and privacy.
• Strong passwords: new passwords need at least 10 characters and can't be common or known-leaked ones.
• Wrong passwords: 10 wrong tries pause that login for 15 minutes and e-mail its owner.

Devices and staff who leave

• See every device you're signed in on, and sign out any of them.
• Sign out everyone, everywhere, in one tap: for a lost phone or a staff member who left.
• Auto sign-out after 12 hours without use, or 30 minutes to 4 hours for a shared front-desk computer, and always after 30 days.
• A "new sign-in" e-mail for each new device, and your password asked again before exports, backups and team changes.
• Combine this with staff roles, so housekeeping never sees guest documents and every change is in the activity log.

Privacy requests from guests

India's Digital Personal Data Protection Act (DPDP) and Europe's GDPR give guests the right to see and erase the personal data a business holds about them. From a guest's page, the owner can:

• Download this guest's data: everything you hold, in one file.
• Erase this guest's personal data: name, phone, e-mail, address, ID numbers and photos are removed. Bookings, payments and invoices stay, because tax law requires them.

As a property, you remain responsible for how you collect and use guest data; InnRow gives you the tools to answer requests quickly.

Protection you don't see

• A strict security policy on every app page, so only InnRow's own scripts can run.
• Full security headers (HSTS, frame blocking, private pages never cached).
• Calendar links and phone notifications can't be used to reach the server's own network.
• A daily check that every code file matches the release, and security logs kept for 180 days.
• A security.txt file so researchers can report a problem privately.

Your data stays yours

Each property has its own separate database. Download bookings and reports as Excel files at any time, and back up to your own Google Sheet on the Homestay and Hotel plans. Read the privacy policy.

Questions people ask