Privacy policy

What we collect

From hosts

• Your business and contact details.
• The services, times, prices and rules you publish, and the bookings made with you.
• The bank details we need to pay you.

From guests

• What a booking needs: your name, a way to reach you, party size and the booking itself.
• Anything the host requires before you book, such as a minimum age for some activities.

From agents and developers

• Account and API key details.
• The requests your agent makes, and which assistant or platform made each booking, so hosts can see where bookings come from.

On this website

This site has no analytics, advertising trackers or third-party scripts. Our hosting provider keeps standard request logs, such as IP address and time, to keep the service secure.

How we use it

• To run bookings: show availability, place holds, take payment, confirm, and notify hosts and guests.
• To give support and resolve disputes.
• To prevent fraud and abuse, and keep Tafaddal secure.
• To improve the service and meet our legal obligations.

We don’t sell personal data.

Payments

Payments are handled by our payment processor. Card and wallet details go straight to them; we receive what we need to confirm a payment, such as the amount and whether it succeeded.

Sharing

• With the host you book, so they can serve you.
• With the agent or platform that made a booking, limited to that booking.
• With service providers who help us run Tafaddal, such as hosting, payments and messaging, under contract.
• When the law requires it.

Retention

We keep personal data only as long as we need it for the purposes above, or as long as the law requires. Specific retention periods will be listed here before this policy takes effect.

Your rights

You can ask to see, correct or delete your personal data, or object to how we use it. Email us and we’ll respond as quickly as we can.

Contact

Questions or requests: hello@tafaddal.ai.