Privacy Policy

This Privacy Policy explains how Kanav Systems Inc. (“Kanav”, “we”, “us”) collects, uses, and protects information when you visit our marketing site and when you use the Caravel PMS service (a product of Kanav Systems Inc.).

Last updated: April 11, 2026 Questions: support@caravelpms.com

Note: This page is a well-structured template. It should be reviewed by counsel for your jurisdiction and data flows.

1. Scope

This Policy applies to (a) our websites that link to this Policy, and (b) the Caravel PMS service (the “Service”). If you are a guest of a hotel using the Service, the hotel is typically the “controller” of your personal information and Kanav acts as a “processor” on their behalf.

2. Information we collect

2.1 Information you provide

Account data: name, email, password (hashed), role/permissions.
Business data: property details, room setup, operational configuration.
Reservation and guest data: booking and guest profile fields you enter into the Service.
Communications: messages you send to support and onboarding communications.

2.2 Information collected automatically

Usage and device data: pages viewed, feature usage, device/browser type, timestamps.
Log data: IP address, request identifiers, error traces, and security events.

2.3 Cookies and similar technologies

We may use cookies/local storage for authentication, session management, and site preferences. See the Cookies section below.

3. How we use information

We use information to:

Provide, operate, and maintain the Service.
Authenticate users, enforce access controls, and prevent fraud/abuse.
Provide support, onboarding, and service communications.
Improve reliability, performance, and user experience.
Comply with legal obligations and enforce our terms.

We may share information with:

Service providers that help us host, monitor, communicate, and deliver the Service (processors).
Customer administrators within your organization, per role/permission settings.
Legal and safety: when required by law, subpoena, or to protect rights and safety.
Business transfers: in connection with a merger, acquisition, or asset sale.

5. Cookies and analytics

We use cookies for essential operations (e.g., sign-in sessions) and may use analytics to understand aggregate usage patterns. You can control cookies via browser settings, but disabling essential cookies may prevent parts of the Service from working.

6. Security

We implement administrative, technical, and physical safeguards designed to protect information. No security program is perfect; you are responsible for maintaining the confidentiality of your credentials.

7. Data retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customers may request deletion/export subject to contractual and legal requirements.

8. Your rights and choices

Depending on your location, you may have rights to:

Access, correct, or delete your personal information.
Object to or restrict certain processing.
Receive a copy of your information (portability).
Opt out of certain marketing communications.

If you are an end guest of a hotel, your request may need to be directed to the hotel as the controller.

9. International transfers

If we transfer information across borders, we will use appropriate safeguards as required by applicable law.

10. Updates

We may update this Policy from time to time. If changes are material, we will provide appropriate notice (for example, by posting a notice within the Service).