Privacy Policy

Last updated: August 4, 2026

1. Introduction

C Form Plus ("we", "our") helps Indian accommodation providers file FRRO Form C arrival reports. This policy explains what we collect and how we handle it across our website, the guest check-in form, the client dashboard, and the C Form Plus Autofill Chrome extension.

2. Information We Collect

• Property account data: your business name, email address, and a hashed password (bcrypt — never stored in plain text). We verify your email with a one-time code when you register.
• Guest Form C data: details a guest submits through your property's check-in form — name, passport and visa details, contact information, arrival information, and a passport-style photograph (automatically compressed to the FRRO portal's 50KB JPEG requirement).
• Contact enquiries: name, email, property name, and message when you use the contact form.
• Payment records: which submission pack you bought, the amount, and the payment reference issued by our payment gateway. We never see or store your card, UPI, or bank details — those are handled entirely by Razorpay.
• Technical & reliability data: server logs and error reports (with IP address and browser user-agent) so we can fix problems. Our error monitoring records which form field caused a problem and timing data — never the values a guest typed.
• Sign-in cookies: used to keep property staff signed in. If you tick Keep me signed in on this device we also set a cookie that lasts up to 14 days, so you are not asked for your password on every visit; it holds a random token, never your password, and changing your password cancels it on every device. We do not use advertising or cross-site tracking cookies.

3. How We Use It

• To let guests pre-fill their own Form C details and let your staff file them to the official indianfrro.gov.in portal via the Chrome extension.
• To operate your account: authentication, your submission balance, and purchase records.
• To send service email (verification codes, payment receipts, balance and retention notices, and submission notifications where enabled) from our own mail domain.
• To monitor errors and guest-facing friction so problems get fixed quickly.
• To respond when you contact us for support.

4. Where Your Data Is Stored

Guest records and uploaded documents are held on servers in Mumbai, India, and are encrypted at rest. Backups are encrypted again before they leave the server, and stay in India.

5. Keeping It Safe

• Data is transmitted over HTTPS. Access is isolated per account — no account can ever read another's guest data. Within your own account you decide who sees what: staff are assigned to specific properties and see only those, and viewing guest documents and exporting data are separate permissions you grant or withhold per person.
• Uploaded files are stored encrypted, with server-generated names, are not browsable or executable, and can only be retrieved by the property that owns them.

6. Sharing

We do not sell, trade, or rent personal information. Data reaches only these third parties:

• The FRRO government portal (indianfrro.gov.in) — guest Form C details, submitted through your own FRRO login when your staff files a report. This is the purpose of the service.
• Razorpay, our payment gateway, which processes your pack purchases and handles your payment details under its own privacy policy. Razorpay receives property billing information, never guest data.
• Zoho, which raises the GST invoice for each purchase under its own privacy policy. Zoho receives your billing name, address and GSTIN and what you bought — never guest data.
• Our hosting and email providers, which store and transmit the data on our behalf and may not use it for any other purpose.

7. Data Retention & Deletion

• Paid submissions stay in your dashboard until someone on your team deletes them — we never delete them on a schedule. Completed check-ins can be purged in bulk at any time; purging removes the database records and the uploaded files immediately, and our encrypted backups retain them for no more than 14 days after that. India's Immigration and Foreigners Rules 2025 require an accommodation provider to keep a foreign guest's record for at least 12 months. Before a bulk delete we tell you how many of the records concerned are younger than that; we do not block the deletion, because the records and the duty are yours.
• Locked (unpaid) submissions are automatically deleted after 90 days. If a check-in was taken while your balance was empty, it stays locked until you add credit. We email you a warning 3 days before deletion, and the deadline is also shown in your dashboard. After that the guest's details and documents are permanently erased and cannot be recovered.
  A check-in deleted this way may be one you were required to keep for 12 months. Adding credit before the deadline unlocks it and lets you export a copy to keep; a locked check-in cannot be exported while it is locked.
  We do this because we should not hold a guest's passport number and document scans indefinitely for a check-in that was never completed. It protects the guest, not us.
• Closing your account deletes your submissions, uploaded files, and logo.
• Sign-in sessions expire after 1 hour of inactivity. A "keep me signed in" token lasts at most 14 days, and is cancelled immediately by signing out, by changing your password, or by an owner removing that person's access. Login-attempt records used for rate limiting are trimmed automatically.

8. Your Rights

Property owners and guests may ask us to access, correct, or delete personal data we hold, or to withdraw consent. Email us at the address below and we will act on verified requests promptly, in line with India's Digital Personal Data Protection Act (DPDP).

If you are a guest, note that your details were submitted to a specific property, which is responsible for filing your Form C. You may contact us directly and we will help.

9. Grievances

If you are unhappy with how we have handled your data or a request about it, write to support@cformplus.in with "Grievance" in the subject line. We aim to acknowledge within 48 hours and resolve within 30 days.

10. Updates to This Policy

When this policy changes we update the "Last updated" date above. Material changes will also be announced to registered properties by email.

Contact us