Privacy Policy

Who this policy covers

This Privacy Policy explains how Shamstay BnB (ShamStay, we, us) handles personal information when you use shamstaybnb.com, our iOS and Android apps, and our booking, hosting and support services. It applies to visitors, guests, hosts and co-hosts.

Contact Shamstay BnB at info@shamstaybnb.com for privacy questions, access or correction requests, and account or data deletion requests.

Information we collect

Account and contact information: your name, email address, mobile number, account role, profile photo, sign-in and verification records, and preferences you provide.

Booking and hosting information: selected properties and dates, guest counts, special requests, booking status, messages, reviews, support enquiries, saved stays, listing details, host applications and co-host permissions. Hosts may provide an exact property address, coordinates, arrival instructions and property photos.

Identity and financial information: identity-document images and details, selfies and liveness-check evidence submitted for verification; payment references, amounts, payment and refund status, invoices, bank-transfer evidence and host payout-account details when you use those features.

Technical information: IP address, browser or app/device information, request and security logs, session identifiers, notification delivery records and push tokens. On the website, Google Analytics can collect usage events, page views and cookie or device identifiers. Newsletter subscriptions contain the email and subscription information you submit.

Why we use information

We use information to create and secure accounts, verify contact details and host identity, review listings, find stays, manage availability and bookings, deliver messages and notifications, process payments and payouts, handle cancellations and refunds, provide support, prevent fraud and abuse, and maintain financial and security records.

Website usage data helps us understand and improve the service. We use newsletter contact information to send updates you subscribe to. Where applicable law requires consent for a particular use, that use requires consent; other processing may be needed to provide the requested service, meet legal obligations or protect the service and its users.

Public information and sharing

Published listings may display the property description, host-supplied photos, amenities, area, relevant host profile or verification information and published reviews. The host-supplied property address and exact map pin can be visible on public property pages before booking. Private access codes, booking-specific check-in instructions, identity evidence, payout details and private messages are not part of public listing pages. Booking participants receive the contact and arrival information needed for their stay, subject to access controls; authorised co-hosts can access the functions and records assigned to them.

We use service providers for hosting, authentication, database and file storage (including Supabase), email and SMS delivery, map tiles (including OpenFreeMap), payment processing and invoicing. Available payment services may include Paymera and Stripe, and financial-document services may include SyrianFatora. The provider used depends on the payment method and service available. Providers receive the information needed to deliver their service; hosted checkout providers handle the payment credentials entered on their own pages.

Push notifications use Expo and the relevant Apple or Google delivery services. Our website uses Google Analytics. If you choose to use the AI assistant when enabled, your conversation and relevant service context are processed by the configured AI provider, OpenAI or Anthropic. Do not send passwords, payment credentials or identity-document images to the assistant. Its answers may be inaccurate and do not confirm a booking.

Authorised staff may access records to operate and support the service. We may disclose information to comply with legal obligations, respond to lawful requests, investigate fraud or protect people and rights. We do not sell personal information. Service providers may process information in countries other than yours, subject to applicable data-protection requirements.

Device permissions and local storage

Camera, photo-library and file-picker access is used when you choose to upload a profile image, identity evidence, property photos or supporting documents. The app does not request microphone access for these uploads. You can decline or revoke access in your device settings; the affected upload feature may then be unavailable.

Location or map interactions are used to search an area or place a property location when that feature is offered. We do not use continuous background location tracking in the current app. You can enter an area manually rather than allowing browser location access.

Notification permission allows booking and account updates on your device. You can change notification settings in the app and operating system. Essential cookies or secure local storage keep you signed in and protect sessions; local storage also remembers language and currency preferences. Browser cookie controls affect website analytics and may affect sign-in functionality.

Retention and security

Account data is retained while needed to provide the account and its services. Booking, payment, invoice, identity-review, support and security records may need to be retained after an account closes for accounting, legal obligations, fraud prevention or unresolved disputes. The period depends on the record and the applicable obligation; a single fixed period does not apply to every category. Contact us for the retention basis applicable to a particular record.

Retained records currently have no automatic expiry or scheduled deletion. Their retention depends on the accounting, legal, safety or dispute purpose. Contact info@shamstaybnb.com to request a review of specific retained data and its retention basis.

When information is no longer needed for these purposes, it should be deleted or anonymised. Backup copies may persist until their normal replacement cycle. We use access controls, restricted storage and protected connections to reduce unauthorised access; no service can guarantee absolute security.

Your choices and account deletion

You can update supported profile fields and preferences in Settings. To request access, correction, deletion, restriction or an objection to processing, email info@shamstaybnb.com using your registered email address, or contact account support. Rights depend on the law that applies to you. We may verify account ownership before acting; do not send your password or full payment credentials.

To delete your signed-in Guest or Host account, open Account settings, choose Delete account, review the notice and type DELETE to confirm. No admin approval is required. Active bookings, unpaid balances, pending payments, refunds, payouts, unsettled host commission, open support cases or staff access must be resolved first. For help without signing in, visit /delete-account or email info@shamstaybnb.com from your registered address.

In the iOS or Android app, open Account, then Account settings and Delete account. Review the consequences, acknowledge permanent deletion and type DELETE to confirm. The server checks outstanding items again before deleting the account. A separate Guest or Host account using the same email is not deleted. Deleting the app does not delete your account. Deleting an account does not itself cancel a booking, complete a refund or remove records we must retain. You can revoke optional permissions in device settings and request newsletter removal through the contact address.

Children and policy updates

Shamstay BnB accounts and booking or hosting transactions are intended for adults aged 18 or older. Adults may include children in a guest count; do not create accounts or submit identity evidence for children. If you believe a child has supplied personal information improperly, contact us.

We may update this policy to reflect service or legal changes. The version and update date appear on this page. Material changes will be communicated through the service where appropriate. Contact info@shamstaybnb.com with questions or complaints; you may also contact a competent data-protection authority where applicable.