Privacy
This website sets no cookies, runs no analytics and has no forms. What the product itself holds about a hotel's guests belongs to the hotel, in India, under the hotel's own control.
This website
cloud.theorionhotels.com is static files. It sets no cookies, loads no analytics, no fonts from third parties and no scripts from anywhere but itself, and has no forms. The web server keeps ordinary access logs (address, page, time) for operating the site, and nothing else is recorded about a visit. Pictures on the site are screenshots of demonstration hotels with fictional guests.
The product
Asar Cloud holds, for each hotel that uses it, the records a hotel keeps: guests and their identification as the law requires, bookings, bills, staff logins, and the operational record. Some things about that are structural rather than policy:
- Each hotel's rows are separated by policy in the database, enforced on every query; the application's own role cannot read across the line.
- The data is held in India, on servers the company operates.
- Our own staff cannot open a hotel's account without a session the hotel's administrator grants, time-boxed and logged, visible to the hotel afterwards.
- Guest contact preferences are absolute: a guest who declines email is excluded from every outreach, without an override.
- Every access and change is logged with the login, the time, the address and the machine.
- A hotel can export its data; the export exists so that leaving is possible.
The hotel is the controller of its guests' data; we process it on the hotel's instructions. Questions about a particular hotel's records go to that hotel; questions about the product go to info@theorionhotels.com.
Changes
This page is a row in the same database as the rest of the site and every change to it is versioned; the date of the last publish is in the site's sitemap.