Privacy Policy
Last updated: July 2026
1. Who We Are
BookQayam operates a cloud-based hotel management platform (“the Platform”). This Privacy Policy explains how we collect, use, and protect information when you use our services. By using BookQayam you agree to the practices described in this policy.
2. Information We Collect
We collect the following types of information:
Account Information
Full name, email address, and password (stored as a secure hash) when you register.
Hotel & Business Data
Hotel name, address, city, contact details, room configurations, pricing, and bookings that you enter into the Platform.
Usage Data
Pages visited, features used, device type, browser, and IP address collected automatically to improve the service.
Payment Data
Payment processing is handled by Stripe. We do not store your full card details — only the last four digits and card type for display purposes.
3. How We Use Your Information
- To create and manage your account and hotel profile.
- To provide, maintain, and improve the Platform's features.
- To send transactional emails (account verification, booking confirmations, billing receipts).
- To respond to support requests and resolve disputes.
- To detect and prevent fraud, abuse, or security incidents.
- To comply with legal obligations.
We do not sell your personal data to third parties.
4. Data Storage & Security
Your data is stored on secure servers provided by Supabase (hosted on AWS). We use row-level security to ensure that each hotel account can only access its own data. All data in transit is encrypted using TLS/HTTPS. Access to production systems is restricted to authorised personnel only.
5. Data Retention
We retain your data for as long as your account is active. If you close your account, you may request an export of your data within 30 days. After that period we may permanently delete your data from our systems, except where retention is required by law.
6. Third-Party Services
We use the following third-party services to operate the Platform:
- Supabase — database, authentication, and file storage.
- Stripe — payment processing. Subject to Stripe's Privacy Policy.
- Resend — transactional email delivery.
Each third party is bound by their own privacy policies and data processing agreements.
8. Your Rights (GDPR & Data Subject Rights)
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data (subject to legal obligations).
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing of your data for certain purposes.
- Restriction — request that we limit how we use your data while a dispute is resolved.
To exercise any of these rights, email us at privacy@bookqayam.com. We will respond within 30 days.
9. Children's Privacy
BookQayam is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. The “Last updated” date at the top of this page indicates when the policy was last revised.
11. Contact Us
For any privacy-related questions or to exercise your data rights, contact us at:
BookQayam Privacy Team
Email: privacy@bookqayam.com