XtraSpace

Privacy Policy

Last Updated: November 2, 2026

At XtraSpace, we prioritize the protection of your personal information. This Privacy Policy details how we collect, use, process, and safeguard the data you provide to us while using our platform.

1. The Role of XtraSpace

Mediator Disclosure: XtraSpace acts as an intermediary platform connecting Hosts and Guests. To facilitate this connection, limited personal or contact information may be shared between the Host and the Guest upon a confirmed booking. We do not warrant the privacy practices of individual Hosts or Guests interacting off-platform.

2. Information We Collect

  • Account Data: We collect your name, email address, profile picture, and authentication tokens provided via third-party providers (like Google Firebase Auth).
  • Profile Data: Phone numbers, city locations, and other optional demographic metadata you add to your user profile.
  • Listing Data: Physical addresses, geographic coordinates (latitude/longitude), photos, and descriptions of spaces uploaded by Hosts.
  • Platform Usage Data: Analytics regarding how you use the platform, pages visited, and search queries executed.
  • Bookings, Messages and Reviews: Booking requests (dates, hours, guest count, the price agreed), counter-offers, check-ins, the messages you exchange with a Host or Guest in XtraSpace chat, reviews, and the reasons you give when you cancel, report or contest something.
  • XtraSpace mobile app: When you use our Android or iOS app we also collect:
    • A push notification token for your device, so we can tell you about bookings and messages. It is removed when you sign out or delete your account.
    • Your approximate location, only when you tap “Near me” or sort by distance, and only with your permission. It is rounded before it leaves your phone, used to find nearby spaces, never shown to Hosts, and not saved to your account.
    • Photos and videos you choose to upload for your profile or a listing.

3. How We Use Your Information

The data we collect is primarily used to operate the platform effectively. This includes:

  • Facilitating secure login sessions.
  • Powering the localized search engine to match Guests with nearby spaces.
  • Transmitting necessary booking details and contact information between matched Hosts and Guests.
  • Improving the UI/UX based on aggregate traffic analytics.

4. Third-Party Integrations

We rely on industry-standard third-party providers for critical platform functions:

  • Firebase (Google): Used for secure user authentication and session management.
  • Firebase Cloud Messaging (Google): Used to deliver push notifications to the XtraSpace app.
  • Amazon Web Services (S3): Used for secure storage of listing images and media.
  • Google Places: When a Host types a listing address, the text is sent through our servers to Google to suggest matching addresses.
  • Google Gemini: When a Host asks us to improve a listing description, that description text is sent to Google's AI service to draft a suggestion.
  • OpenStreetMap: Maps in the XtraSpace app load map images from OpenStreetMap, which receives your device's IP address and the area of the map being shown, but no account details.
  • Google Analytics and Google Tag Manager: Used, only with your consent, to measure how visitors find and use XtraSpace.
  • Microsoft Clarity: Used, only with your consent, for heatmaps and anonymised session replays that show where pages are confusing. Text you type into forms is masked and not recorded.
  • Payment Processors: We may integrate with third-party gateways (e.g. Stripe, Razorpay) which process your financial data independently of XtraSpace.

These integrations are governed by their respective privacy policies.

5. Cookies & Analytics

Essential storage: We store a small amount of data in your browser that the site needs to work, such as your login session and your cookie choice. These are always on.

How you found us: On your first visit we note, in your own browser, the page you landed on, the website that referred you and any campaign tags in the link (such as utm_source). If you create an account, we save this with your account so we know which channels bring people to XtraSpace. It is never shared with advertisers.

Analytics and advertising cookies: If you click "Accept" on our cookie banner, we use Google Analytics (loaded through Google Tag Manager) to understand which pages are visited, how visitors arrived (for example from a search engine, a social post or an ad campaign) and which features are used. With the same consent we may use advertising measurement tags, such as those from Google or Meta, to learn which campaigns bring people to XtraSpace. These cookies are not set until you accept.

If you click "Reject", or before you choose, no analytics or advertising cookies are set. Google may still receive basic, cookieless signals (such as that a page was loaded) which do not identify you. You can change your choice at any time from the "Cookie settings" link in the footer.

6. Data Retention & Deletion

We retain your personal data for as long as your account remains active. You can delete your account and associated data at any time on our Delete your account page, in the XtraSpace app (Profile > Delete account), or by contacting our support team. Bookings, reviews and messages that other people are part of stay in their history under “Deleted user”.

7. Security Measures

XtraSpace employs robust electronic and procedural safeguards to secure your data. However, please be aware that no transmission over the Internet or digital ecosystem is 100% secure. You provide information at your own risk.

8. Contact Us

For questions about this policy, or to ask for your data to be corrected or deleted, email info@xtraspace.in or call +91 76666 02199. If you write to us through the form on our contact page, we keep your name, email address and message so that we can reply.