Privacy policy

Last updated 15 November 2026

We collect what we need to run your booking, and nothing we do not need. We do not sell your data.

Who is responsible

Bula, run by TODO: registered business name and address, decides how your data is used. Questions go to TODO: privacy contact email.

What we collect

• Sign-in details. Your mobile number if you sign in with a one-time code, or your name, email address and profile picture from Google if you use Google sign-in.
• Booking details. The stays, dates, guests, trip plans and payments you make, and your booking codes. Guest names you enter for a booking.
• Host and partner details. For people who list on Bula: the property, rooms, prices, photos and the details needed to pay them out.
• Technical data. Basic device and browser information, IP address and error reports, used to keep the site working and to fix faults.
• On your device. Your sign-in session, saved trips, and offline maps and pages you choose to download are stored in your browser. They stay on your device.

We do not collect your card, UPI or bank login details. These go straight to the payment partner.

Why we use it

• To make and manage your bookings, take the advance and give refunds.
• To send you booking emails: confirmations, host replies, cancellations and refunds.
• To show your host the details they need to receive you.
• To keep Bula secure, prevent misuse and fix problems.
• To meet legal, tax and accounting duties.

We do not use your data for advertising and we do not sell it.

Who else sees it

• The host of a stay you book sees your name, contact details, the dates and the number of guests.
• Service providers that run Bula for us: Google Firebase (sign-in), a payment partner (TODO: provider name), an email delivery service, a database and file storage host, and an error monitoring service. They process data only to provide their service to us.
• Maps. Maps load tiles from OpenFreeMap and OpenStreetMap, which see your IP address like any website you visit.
• Authorities, where the law requires it.

Some of these providers are outside India, so your data may be processed abroad.

How long we keep it

We keep your account while you use Bula. We keep booking and payment records for as long as tax and accounting rules require. TODO: retention period, for example 8 years for invoices When we no longer need data, we delete it or remove what identifies you.

Your choices

You can ask to see, correct or delete your data, or to withdraw consent, by writing to us. We will answer within TODO: response time, for example 30 days. Deleting your account does not remove records we must keep by law.

Cookies and similar storage

We use only what the site needs: a sign-in session and storage for saved trips and offline use. Our error monitoring may record technical details of a page that fails. We do not use advertising cookies.

Security

Data is sent over HTTPS and access is limited to the people who need it. No system is perfectly safe. If a breach affects you, we will tell you and the authorities as the law requires.

Children

Bula is for adults. Do not make a booking if you are under 18.

Grievance officer

For a complaint about your data or the platform, contact our grievance officer: TODO: name, email and postal address of grievance officer. See also the contact page.

Changes

If we change this policy, we will update the date above and, for big changes, tell you by email or on the site.