WhatsApp Automation for Indian Hotels 2026: GST Slabs, Form C & DPDPA Guest Data

Direct answer: what Indian hotels and guesthouses need to know about WhatsApp automation in 2026

Indian hotels using the WhatsApp Business Platform pay Meta per 24-hour conversation window in the India pricing band on developers.facebook.com/docs/whatsapp/pricing. Four regulatory frameworks matter most: the GST regime on hotel accommodation applies tiered rates — 12% GST on room tariff up to ₹7,500 per night and 18% GST above that (per GST Council notifications; check gstcouncil.gov.in for current rates as slabs have been revised); the Bureau of Immigration (immigrationindia.nic.in) requires every hotel and lodging house to submit Form C for every foreign national guest within 24 hours of check-in, and WhatsApp intake flows for international bookings should support secure passport-detail collection to feed this filing; the Digital Personal Data Protection Act 2023 (meity.gov.in) governs guest personal data; and FSSAI (fssai.gov.in) applies where the hotel operates food and beverage outlets or in-room dining.

How much does the WhatsApp Business Platform cost for an Indian hotel in 2026?

Meta prices per 24-hour conversation window in four categories at developers.facebook.com/docs/whatsapp/pricing under the India band — historically among the lower per-conversation rates globally. The 2024 free-tier of 1,000 service conversations per Business Account per month typically absorbs a mid-size property's inbound-guest-question volume.

Practical monthly-cost patterns for Indian hotel operators:

• Single 15-40 key guesthouse or boutique property running booking confirmations, check-in instructions, and post-stay follow-up: low hundreds of rupees per month for Meta charges.
• Mid-size 60-150 key hotel with automated upsell (spa, F&B, tour packages) and post-stay review requests: low-to-mid thousands of rupees depending on marketing category share.
• Chain operator across multiple properties running seasonal marketing broadcasts: cost driven by marketing conversations at peak seasons (festive, winter tourist, monsoon staycation); benchmark against SMS/email alternatives.

A Business Solution Provider (BSP) — Gupshup, Karix, WATI, Zoko, Interakt, AiSensy — sits on top of Meta charges. 18% GST typically applies to BSP invoices from an Indian-registered entity and is generally recoverable as input tax credit for a GST-registered hotel. Hotel accommodation itself is taxable per the tiered GST slab; F&B in the same hotel typically at 5% (without input credit) or 18% (with input credit) depending on the room-tariff-linked classification — check the current GST Council notification for the specific interaction.

How do the GST slabs on hotel accommodation affect WhatsApp booking-confirmation messages?

The GST Council sets tiered rates for hotel accommodation based on the transaction value per unit of accommodation per day. Historically the split has moved through several iterations:

• Below ₹1,000 per night: nil GST (specific exemption; verify against current notification).
• ₹1,001 to ₹7,500: 12% GST with input tax credit.
• Above ₹7,500: 18% GST with input tax credit.

GST Council notifications at gstcouncil.gov.in are the source of truth for the current slabs and their effective dates. Restaurant service inside a hotel has a separate rule that depends on whether the room tariff crosses the ₹7,500 threshold — a 5% (without ITC) versus 18% (with ITC) split.

Practical WhatsApp implications:

• Booking-confirmation messages should show the base tariff, applicable GST rate, and total inclusive of GST. Booking confirmations that show only the base tariff and add GST silently at the payment link stage create Consumer Protection Act 2019 exposure for hidden charges.
• Multi-room or multi-night bookings can straddle GST slabs if the daily tariff varies (peak vs. off-peak). Automated confirmations should reflect the actual applicable rate per night, not a blanket rate.
• Group bookings with variable room categories should show a line-by-line GST breakdown to avoid disputes at checkout.
• Cancellation and refund messages must handle GST reversal correctly — refund of the tariff triggers proportionate reversal of the collected GST, which the hotel must reflect in its GSTR returns.
• Foreign-guest bookings paid in foreign currency need INR conversion at the applicable RBI reference rate; the GST computation happens on the INR-equivalent value.

How does Form C foreign-guest registration interact with WhatsApp intake for Indian hotels?

The Registration of Foreigners Act 1939 and the Registration of Foreigners Rules 1992 require every hotel, guesthouse, and lodging house in India to file Form C for every foreign national who stays. The current mechanism is the Bureau of Immigration's C-Form portal at indianfrro.gov.in (also linked from immigrationindia.nic.in), with filing typically required within 24 hours of the guest's arrival.

Information Form C requires includes:

• Full name as per passport.
• Passport number, issuing country, place of issue, date of issue and expiry.
• Visa details (number, type, valid from/to).
• Purpose of visit and duration of stay.
• Address before arrival at the hotel and next intended address.

Practical WhatsApp implications:

• International bookings via WhatsApp should route to an intake flow that securely collects passport image and visa details ahead of arrival, so that Form C filing can be prepared before check-in.
• Passport images and visa details are personal data under the DPDPA 2023 and are also government-issued documents requiring careful handling — sending them in a WhatsApp group or forwarding them casually creates both DPDPA exposure and identity-theft risk.
• Retention: hotel records supporting Form C filings must be preserved as per the Registration of Foreigners Rules; typical practice is minimum eight years, though verify against the current notification.
• FRRO (Foreigners Regional Registration Office) additional registration applies for foreign guests staying more than 180 days — hotels handling long-stay foreign guests should route those cases to a defined process, not into a general WhatsApp inbox.
• The Bureau of Immigration and local police can request access to Form C records; a WhatsApp thread containing the underlying documents is discoverable in that process.

How does the DPDPA 2023 apply to hotel guest data collected via WhatsApp?

The Digital Personal Data Protection Act 2023 (meity.gov.in) applies to processing of Indian residents' personal data and, for foreign guests, to any processing in India. Hotels handle a rich cross-section of personal data via WhatsApp — booking details, payment references, passport/ID scans, dietary preferences (which can imply religious or health data), room-preference history (which can reveal patterns of life), and special-request notes.

Core DPDPA obligations that map onto hotel WhatsApp usage:

• Notice and consent: plain-language notice at collection covering purpose, retention, rights, and grievance contact. A pre-arrival WhatsApp message that begins the intake should carry the notice link, not bury it later.
• Purpose limitation: guest data collected for stay-management cannot be sold to third parties or used for cross-promotion by other properties without a fresh consent.
• Data Principal rights: access, correction, erasure — hotel systems and WhatsApp thread archives are within scope.
• Cross-border data: DPDPA restricts transfers to jurisdictions the Central Government notifies; overseas-hosted PMS and WhatsApp automation platforms need documented data-residency arrangements.
• Grievance redressal: a published Grievance Officer contact and defined response timeline.

Practical patterns for compliance:

• Route passport image collection to a purpose-built secure form (many PMS platforms include one) rather than free-text WhatsApp attachment.
• Never share guest passport details or ID scans in a WhatsApp Group (housekeeping, F&B) — those staff do not need to see the ID.
• Store consent records with timestamps; a booking confirmation reply that includes an explicit consent action is a defensible baseline.
• Have a defined process for guest access and erasure requests including WhatsApp thread content.
• DPDPA penalties can reach ₹250 crore for certain contraventions; the Data Protection Board of India is the enforcement body.

How do Indian PMS and hotel management systems integrate WhatsApp for guest communication?

The Indian hotel property-management-system (PMS) and channel-manager market has several vendors, each with different WhatsApp integration paths:

• eZee Frontdesk (ezeetechnosys.com) — India-headquartered PMS with WhatsApp integration for booking confirmations and post-stay follow-ups.
• Hotelogix (hotelogix.com) — cloud PMS with India footprint and WhatsApp integration via partner platforms.
• STAAH (staah.com) — channel manager and booking engine with WhatsApp-adjacent guest-communication tools.
• RoomRaccoon (roomraccoon.com) — cloud PMS.
• Djubo (djubo.com) — India-focused hotel-tech platform.
• Cloudbeds (cloudbeds.com) — global PMS with India adoption.

Meta's official BSP directory at business.whatsapp.com/partners lists approved gateway providers. Hotels evaluating an integration should confirm the BSP relationship, data-residency arrangement (relevant under DPDPA cross-border rules and Form C document handling), GST invoicing for input tax credit, and whether the marketing-template approval turnaround supports the property's promotional calendar (festive, off-season, staycation, corporate).

How should Indian hotels handle post-stay review and marketing broadcasts via WhatsApp?

Post-stay follow-up is one of the highest-value WhatsApp touchpoints for a hotel — driving reviews on Booking.com, Google Maps, MakeMyTrip, and OYO, and building the direct-booking mailing list that reduces OTA commission cost over time. It is also a common source of ICO/PECR-adjacent complaints in the UK context and DPDPA/CCPA-adjacent complaints in India.

Compliance-safer patterns:

• Post-stay thank-you + review request: transactional in nature, generally acceptable within 24-48 hours of checkout. Include an easy opt-out for future marketing.
• Consent for future marketing: separate opt-in during check-in or at checkout for future promotional broadcasts (festive offers, spa packages, room upgrades). Do not assume the booking constitutes consent to future marketing.
• Broadcast frequency: two to four marketing sends per year to a segmented list generally sits inside guest tolerance; monthly promotional blasts drive block rates that damage Meta phone-number rating.
• Segmentation: previous corporate guests can be segmented differently from leisure, families differently from solo business travellers; matching offer to segment is both better performance and better compliance (soft opt-in scope is narrower for dissimilar offers).
• Foreign guests: WhatsApp marketing to a foreign guest whose contact was collected for stay purposes needs the same DPDPA notice-and-consent treatment; extra caution is warranted where the guest's home jurisdiction has stricter rules that may apply on top.
• Review-request messaging: cannot promise a discount or gift in exchange for a positive review — Advertising Standards Council of India and platform-level rules from Google, Booking.com, Tripadvisor all prohibit paid or coerced reviews.
• Complaints via WhatsApp: are formal customer communications under Consumer Protection Act 2019 and must be logged and responded to within the timeframes set in the hotel's published grievance policy.