Privacy Policy

Who we are

SastyBed is a hostel management platform operated by GOFTECH, serving student hostels and their residents across Pakistan. In this policy, “SastyBed”, “we”, “us” and “our” refer to the SastyBed service; “you” refers to any student or hostel owner who uses it.

Information we collect

• Account details — your name, email address, phone number and password (stored encrypted).
• Identity verification (KYC) — for students who choose to verify, your CNIC number and CNIC document images; for owners, business and ownership documents. These are used solely to verify identity and build trust between students and owners.
• Booking & stay records — hostels you view or save, booking requests, enrolments, rooms, move-in and move-out dates, and related notes.
• Messages — chat messages you exchange with a hostel owner (or student) inside the app.
• Device & usage data — app version, device type, and basic diagnostic information to keep the service reliable.

How we use your information

• To create and manage your account and route you to the right experience (student or owner).
• To process booking requests and walk-in enrolments and let owners confirm availability.
• To verify CNIC/identity where you submit it, reviewed by our admin team.
• To send transactional notifications and, where an owner has enabled it, WhatsApp rent reminders.
• To keep SastyBed secure, prevent abuse, and comply with legal obligations.

How we share information

We share only what is necessary to deliver the service:

• With hostel owners — when you send a booking request or enquiry, the owner sees the details needed to confirm your stay (such as your name, contact and requested room/dates).
• With service providers — trusted infrastructure and messaging providers (for example, the WhatsApp Business gateway) that process data on our behalf under confidentiality obligations.
• For legal reasons — where required by law or to protect the rights and safety of users.

We do not sell your personal data.

Payments

SastyBed does not store your card details. Where online payment is enabled, payments are handled by the relevant payment provider. For walk-in enrolments and “Pay at hostel” bookings, you pay the hostel directly and SastyBed never touches the money.

Data retention

We keep your data for as long as your account is active. If you stop using SastyBed or request deletion, we retain backups for up to 90 days and then permanently delete your records, except where we must keep certain information to meet legal obligations.

Free trial accounts

New hostel owner accounts start with a one-time free trial. When the trial ends, the account becomes read-only — you keep full access to view and export everything you entered — until our team approves it. If an account is not approved, it and its data are permanently deleted a set period after the trial ends. We email you before that happens, and you can export your records at any point during the read-only period.

Deleting a trial owner account removes that owner’s own records — their hostels, rooms, staff, expenses, bookings, payments and uploaded photos. Student accounts are never deleted by this process: a student may also be renting from other hostels, so their login and their records with other owners are left untouched. Where a student has no remaining relationship with any hostel, we remove the identity documents that owner had collected, since the tenancy that justified holding them no longer exists.

The free trial is available once per person. To prevent it being used repeatedly, we permanently retain a one-way cryptographic hash of the email address, phone number and CNIC used to start a trial. A hash cannot be reversed to recover those details, it is never shown to anyone, and it is retained even after an account is deleted. It is used for no purpose other than checking whether a trial has already been granted.

Your rights & account deletion

You can access and update your profile from within the app at any time. You may request deletion of your account and associated personal data by following the steps on our Account Deletion Request page.

Security

We use industry-standard safeguards — encryption in transit, hashed passwords and access controls — to protect your information. No system is perfectly secure, but we work continuously to keep your data safe.

Children

SastyBed is intended for users aged 16 and above. We do not knowingly collect data from children below this age.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new “Last updated” date.

Contact us

Questions about your privacy? Email info@goftechsolutions.com and we’ll get back to you.