Legal

Privacy Policy

Your Data, Your Control

At Elyra (developed by Kalpasys, a division of the Kalpana group), we believe that your hotel's data is its most valuable asset. Our privacy philosophy is simple: You own your data; we only provide the engine to run it.

1. Data Controller vs. Data Processor

The Hotel (You)

As the user of Elyra, you are the Data Controller. You decide which guest information is collected, how long it is stored, and who has access to it.

Kalpasys (Us)

We act as the Data Processor. We provide the infrastructure (VPS or Odoo.sh) and the software logic to process your operations. We do not sell, rent, or trade your guest data to third parties.

2. Information We Collect

To provide real-time synchronization and operational excellence, Elyra processes the following types of information:

Guest Information

Name, contact details, and identification for legal compliance (e.g., Police Form exports).

Operational Data

Room statuses, housekeeping logs, and reservation history.

Financial Data

Folio charges, VAT details, and invoices processed via native Odoo accounting.

Technical Logs

IP addresses and browser types used for security monitoring and ensuring the under-10s synchronization via the Odoo Bus.

3. Data Isolation & Security

Our "Lightweight SaaS" architecture is designed with security-by-design:

Database Isolation

Unlike traditional SaaS platforms that mix all client data in one table, Elyra provides isolated PostgreSQL databases for every tenant. Your data never touches another hotel's data.

Hosting Choice

We support Self-hosted deployments, meaning you can choose to host Elyra on your own servers to maintain 100% physical control over your data.

Encryption

All communication between your reception, housekeeping tablets, and our servers is encrypted via SSL (Let's Encrypt).

4. Real-Time Processing & Third Parties

To function as a modern PMS, Elyra connects with essential third-party services:

  • Payment Gateways: If you use Stripe or SumUp, payment data is handled directly by these providers under their own privacy standards.
  • Channel Managers: Data from OTAs (Booking.com, Airbnb, etc.) is ingested via webhooks or iCal to keep your planning board updated in real-time.
  • Audit Trails: Every manual rate adjustment or discount is logged in an audit trail for your internal security.

5. Data Sovereignty & Portability

Our "Zero Vendor Lock-in" promise means you are never a prisoner of our platform:

  • Full Exports: You can export your guest lists, accounting moves, and reservation history at any time.
  • Instance Migration: Because Elyra is built on Odoo 18.0 Community, you can move your entire database from our cloud to your own VPS without losing a single line of data.

6. International Compliance

Guided by our Swiss heritage, we adhere to high standards of data protection, aligning with GDPR principles for our European clients and local regulations for our Brazilian and international operations.

7. Contact Us

For any questions regarding your data or to exercise your rights of access and deletion, please contact our support team at support@elyra-suite.com.

Elyra — Be The Service