Terms & Conditions

These Terms govern two separate relationships: (a) between OurGate and the hospitality companies ("Hosts") that create accounts to manage bookings and verify guests, and (b) between OurGate and the individual guests ("Guests") who upload identity documents to confirm a specific reservation. By creating a Host account, or by submitting identity information through a guest verification link, you agree to the applicable sections below.

• From Hosts: business and contact details, property information, booking records, and payment details processed by our payment partner (Razorpay).
• From Guests: full name and phone number (as entered by the Host at booking time), a one-time password sent to that phone number for verification, and a photograph of a government-issued identity document (passport, national ID card, or driving licence) that the Guest voluntarily uploads.

Guest identity documents are collected for one purpose only: to confirm that the person checking in matches the name on the booking, as requested by the Host for their own compliance and safety records. We do not use this data for marketing, profiling, or any purpose unrelated to the specific booking it was collected for.

Uploaded identity documents may be analyzed by an automated system (including third-party AI models) to check that the document type matches what was selected and that the name on the document reasonably matches the name on the booking. This automated check assists a human reviewer at the Host company — it does not make a final accept/reject decision on its own in every case, and a Host may always review the submission manually.

Identity documents are stored in an access-controlled cloud storage bucket and are never made publicly accessible. They are retrieved only through short-lived, single use links generated at the moment a Host with the correct permissions needs to view them. Booking and account data is stored in a managed database with restricted access.

We retain Guest identity documents to support the Host's own record-keeping and compliance needs, unless a deletion request is made (see Section 7) or the Host account is closed and its data purged. Hosts are responsible for complying with any retention obligations that apply to their own business.

A Guest may, at any time:

• Request a copy of the identity data held about them for a specific booking.
• Request that their uploaded identity document be deleted.
• Withdraw consent for future processing, which may prevent completing a booking's verification.

These rights are provided as full, standalone obligations under each framework that applies to you, not merely as shared principles: India's Digital Personal Data Protection Act (DPDPA) for Indian users, the EU/UK General Data Protection Regulation (GDPR) for individuals in the EEA/UK — including the rights of access, rectification, erasure, restriction, portability, and objection described in our Privacy Policy — and the California Consumer Privacy Act (CCPA) for California residents, including the right to know, delete, correct, and opt out of sale/sharing (we do not sell or share personal information). Requests can be made through the verification link itself or by contacting us directly.

We share Guest data with: the Host who created the booking (for verification purposes only); our cloud storage and database infrastructure providers, who process data on our behalf under standard processing terms; our SMS provider, to deliver one-time passwords; and an AI provider, to perform the automated document check described in Section 4. We do not sell Guest data to any third party.

Hosts are responsible for the accuracy of the booking details they enter, for lawfully obtaining a Guest's consent before generating a verification link on their behalf, and for how they use verified Guest information after it leaves this platform (for example, in their own property records).

OurGate provides identity verification tooling on an "as is" basis. We do not guarantee that automated document checks are error-free, and Hosts remain responsible for their own final verification decisions. To the fullest extent permitted by law, OurGate's liability for any claim arising from use of the platform is limited to the fees paid by the Host in the twelve months preceding the claim.

Hosts agree to indemnify and hold OurGate harmless from any claim, loss, or damage arising from the Host's misuse of the platform, breach of these Terms, or violation of applicable law in the course of collecting, using, or handling Guest data obtained through the platform.

OurGate is not liable for any delay or failure to perform caused by events beyond its reasonable control, including internet or telecommunications outages, failures of third-party infrastructure or payment providers, or other circumstances outside its reasonable control.

OurGate is based in India, and these Terms — as a commercial agreement — are governed by the laws of India. Any dispute arising out of or in connection with these Terms shall first be addressed through good-faith negotiation between the parties; if unresolved within thirty days, the dispute shall be subject to the exclusive jurisdiction of the courts at Ghaziabad, Uttar Pradesh, India. This clause governs the commercial contract itself and does not limit or override the data protection rights available to you under the GDPR, CCPA, or DPDPA as described in our Privacy Policy, which apply based on your own location.

If any provision of these Terms is found unenforceable or invalid under applicable law, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining provisions continue in full force and effect.

We may update these Terms from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the platform after a change constitutes acceptance of the updated Terms.

Questions about these Terms can be directed to our Data Protection Contact at urbanescape09@gmail.com or by phone at 9958780399. This is the same contact point for GDPR, CCPA, and DPDPA inquiries alike. For Indian users specifically, this contact also serves as our Grievance Officer as required under India's Digital Personal Data Protection Act and applicable IT Rules relating to these Terms or to data handled under them; we aim to acknowledge grievances within a reasonable time and resolve them promptly.