Security and trust
How we keep your hotel data safe, who can see it, and how you can take it with you.
Hosting
- BitLegacy runs on Amazon Web Services (AWS).
Backups
- Your database is backed up every 15 minutes.
- Each backup is kept for 7 days.
- On the Pro+ and Business plans you can also download a full backup of your own data.
Encryption
- All traffic to and from BitLegacy uses HTTPS.
- Passwords are stored as bcrypt hashes, never as plain text.
- Sensitive secrets are encrypted with AES-256.
Who can see what
- You give each staff member a role, with their own permissions.
- An activity log shows who did what, and you can export it as CSV.
- The account owner signs in with a two-step login: password plus a one-time code (OTP) sent by email.
Your data, your export
- Export to Tally (XML), download CSV files, and export your guest register.
- Higher plans can also download a full backup.
- When your plan ends, your account stays read-only for 14 days. After that your data is kept for 90 days before it may be deleted.
Guest ID and Form C
- Guest ID proofs are masked by default.
- Only staff you allow can see them.
- By default, ID proofs are deleted automatically after 5 years.
Privacy and DPDP
- Guest consent is recorded.
- Guests can send a data request from the privacy page on your hotel's website (/legal/privacy).
- Grievance Officer: Captainjeet Kaur, support@bitlegacy.in
Channel manager reliability
- BitLegacy retries it automatically, up to 8 times, waiting a little longer each time.
- Your staff get an alert.
- You can see the sync status yourself.
Support
- Support is open all 7 days, 9 AM–11 PM IST.
- Email support@bitlegacy.in, message us on WhatsApp, or call +91 97809 62113 · +91 83185 78092.
- Messages sent outside 9 AM–11 PM IST get a reply the next morning.
support@bitlegacy.in · WhatsApp us · +91 97809 62113 · +91 83185 78092
“Requested changes are usually done the same day.”