Legal
Privacy Policy
Last updated: 3 November 2026
Who is responsible
BookForward is operated by Manan Chandak, an independent entrepreneur based in India. For any privacy question or request, write to welcome.bookforward@gmail.com — a human answers.
What we collect
Your account details (name, email, password hash, optional phone), the bookings you add (hotel, dates, room type, guests, price), price-check history, savings records, and optional push-notification subscriptions. If you subscribe to a membership, our payment processor (Stripe) handles your card — we never see or store card numbers. Waitlist emails are stored separately.
What we don't do
We never ask for your email inbox access, your travel-account passwords, or your payment card. We don't sell or rent your data, and we don't run advertising trackers. Price checks query public hotel prices — we don't log in anywhere on your behalf. We collect the minimum needed to run the service and nothing more.
Who else sees data
Only processors needed to run BookForward: our hotel-price data provider (Nuitee Connect / liteapi.travel — hotel queries and the optional booking checkout), Stripe (membership payments and managed tax compliance), Google (optional sign-in), Vercel and Neon (hosting and database), and our email service (transactional mail only). Each processes data solely to provide their part of the service. Nothing is shared for advertising, ever.
Cookies
We use strictly necessary cookies only: a session cookie to keep you logged in and a short-lived security cookie during Google sign-in. No analytics, advertising, or cross-site tracking cookies. See the Cookie Policy for details.
Children
BookForward is for adults only (18+). We do not knowingly collect personal data from children. If you believe a minor has given us data, write to us and we will delete it immediately.
Retention & deletion
You can delete any watch at any time (this removes its price history). To delete your whole account, use Settings → Delete account — or email the grievance officer — and we erase everything, backups included, within 30 days. We retain only what accounting law requires (e.g., payment records).
Your rights (India — DPDP Act)
You can access, correct, or delete your personal data, and withdraw consent at any time. Contact us at welcome.bookforward@gmail.com and we will respond within the statutory timelines. You may also file a complaint with the Data Protection Board of India.
Grievance officer
Per Indian consumer and data-protection requirements, complaints are acknowledged within 48 hours and resolved within 30 days. Contact the grievance officer at welcome.bookforward@gmail.com with "Grievance" in the subject line.