FindMyStay.in
Security
How we protect FindMyStay.in — and the practical steps property owners and users should take to keep accounts safe.
Last updated: October 28, 2026
Overview
Protecting the Service
FindMyStay.in hosts public listings and owner tools that may contain business and guest-related records. We apply administrative, technical, and organizational measures appropriate to that risk. This page explains those measures in plain language and should be read with our Privacy Policy.
Approach
Security principles
Least privilege
Owner tools check roles and permissions on the server — not only by hiding menu links.
Property isolation
Queries and mutations for owner data are scoped to the authorized property.
Defense in depth
HTTPS, hashed passwords, session controls, and audit trails for sensitive actions.
Network
Encryption in transit
We serve the website over HTTPS so traffic between your browser and FindMyStay.in is encrypted in transit. Always check that you are on the official FindMyStay.in domain before signing in.
Identity
Account security
- Passwords are stored hashed — we do not store plaintext passwords.
- Email verification and password reset flows help protect account recovery.
- Owners can review sessions and sign out other devices from Security settings in the owner workspace.
- Use a unique, strong password and do not share logins.
Authorization
Access control
Subscription owners have full access to their properties. Invited team members receive role-based permissions (for example front desk, finance, housekeeping, or read-only). Sensitive finance actions can require approvals when you enable them.
Owner tools
Owner workspace controls
Team & roles
Invite only people you trust; revoke access when staff leave.
Approvals
Require sign-off for refunds, expenses, or adjustments when multiple users are enabled.
Data export
Authorized exports produce copies for your records — store them securely.
Privacy settings
Configure retention guidance and keep guest ID fields minimal and restricted.
Billing
Payments
Plan payments are processed by our payment provider (for example Razorpay). We do not store full card numbers on FindMyStay.in servers. Payment security also depends on the provider’s controls and your device security.
Operations
Monitoring & abuse prevention
We monitor for abuse, fraud, and security anomalies appropriate to the Service. We may rate-limit requests, block automated scraping, and investigate suspicious account activity.
Response
Incident response
If we become aware of a security incident that affects your personal data, we will take steps to contain the issue and notify affected users and authorities as required by applicable law.
Shared responsibility
What you can do
- Use a strong unique password and keep email recovery secure.
- Sign out shared front-desk computers; use “log out other devices” if needed.
- Invite team members with the least privilege required.
- Do not paste secrets into listing text or public pages.
- Treat CSV exports and guest data as confidential.
- Report phishing or unexpected password-reset emails immediately.
Transparency
Honest limits
Report a security concern
Tell us promptly if you suspect unauthorized access or a vulnerability.