Your hotel's data stays private.

Last updated 31 October 2026. What protects a property's guests, bookings and money inside Tathyastra. Each point describes how the system works today.

Every hotel is kept separate

Every request is checked against the hotels the signed-in person is allowed to use. A request for any other hotel is refused before it reaches the data. Hotels in a group keep their own rooms, prices, staff and accounts.

Each person sees only their part

Roles decide what someone can do, and an admin can limit a staff member to individual pages. Reception can take a payment without seeing revenue, and someone can manage prices without seeing the accounts. Discounts above a set limit need an admin.

Every change is recorded

Every change is saved with who made it and when. For settings, the old and new values are kept, so a mistake can be found and undone.

Signing in

• Accounts sign in through Supabase Auth, not passwords stored by us.
• A new account starts on a temporary password and must change it before anything else.
• Everything between your browser and Tathyastra travels over HTTPS.

Where the data lives

Property data is kept in a managed Postgres database run by Supabase. Bookings and rates reach Booking.com, Expedia, Agoda and Airbnb through Channex, the connection we are built on, and only for hotels that connect their booking sites.

AI is off until you switch it on

The AI analyst only runs when a hotel turns it on with its own Claude or OpenAI key. The key is stored encrypted (AES-256-GCM), answers come only from the hotel's own figures, and a second AI checks every figure before you see it.

Your data stays yours

Reservations, orders and statements export to Excel or PDF whenever you want them, with no phone call and no charge. Your guests, prices and figures are used only to run your hotel.

Found something that looks wrong? Tell us on WhatsApp or call +977 981-4903049, and we will look at it the same day.