Privacy policy

Hostelivo is a software platform that properties use to run their operations.

For guest data, we understand the property to be the controller and us to be the processor acting on its behalf. For property account and team data, we are the controller. This split needs legal confirmation for each type of data.

Team account data such as name, email and sign-in history.

Guest data the property collects, such as name, stay dates, bed and contact method, plus extra fields only when the property category requires them.

ID document images are not requested by default. Sensitive data such as fingerprints is not collected.

We process data to provide the service to the property, carry out the reservation and protect accounts.

Some data is processed by the property under a legal obligation it has. Marketing messages need separate consent that can be withdrawn.

Every field is optional except the name, unless the property category requires it. Guests see what is required and what is optional before submitting.

We do not sell data or use it for advertising.

We use service providers for hosting, and for email when it is turned on. The list of service providers will be published with the final version.

Lock vendors receive only a credential reference, never a name or ID number. The payment provider handles payment data directly.

We prefer to host guest data inside Saudi Arabia. If any service provider outside the Kingdom is needed, we list it, minimise what it receives and apply the required safeguards.

We keep data only as long as the purpose or a legal obligation on the property requires. After that it is deleted or made no longer linked to a person.

Default periods for each type of data will be set after legal review.

We use encryption, isolation between properties, fine-grained permissions and access logs. Details are on the security and privacy page.

If an incident affects data, we tell the property without delay with the facts it needs for its obligations to the authorities and its guests.

Data subjects have rights including knowing how their data is processed, accessing it, asking for correction, asking for destruction and withdrawing consent where consent is the basis.

Guests send their request to the property they stayed at. We help the property carry it out.

For privacy questions, use the contact page.