Privacy Policy — BusyBeds

BusyBeds ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

1. Information We Collect

Account information: When you register, we collect your name, email address, phone number, and password (stored as a secure hash). If you sign in with Google, we receive your name and email from Google.

Payment information: Payment processing is handled by Stripe, PayPal, or PesaPal. We do not store your card details. We receive confirmation of payment status and transaction IDs only.

Usage data: We collect information about how you use BusyBeds, including hotels viewed, coupons generated, and pages visited. This helps us improve the platform.

Location data: We may ask for your location to show nearby hotels. This is used only within the app and is not stored permanently.

2. How We Use Your Information

To create and manage your account
To process subscription payments and generate discount coupons
To send you coupons, booking confirmations, and account notifications via email
To facilitate Stay Requests between you and partner hotels
To calculate and pay referral commissions
To improve our platform through analytics
To send marketing emails (only with your consent; you can unsubscribe at any time)

3. Information Shared With Hotels

When you generate a coupon or submit a Stay Request for a specific hotel, we share your name and contact details with that hotel so they can verify your coupon and fulfil your request. Hotels are prohibited from using your data for any purpose other than your stay.

4. Third-Party Services

We use the following third-party services:

Stripe, PayPal, PesaPal — payment processing
Resend — transactional email delivery
Google — OAuth sign-in and Maps/Places data
Cloudinary — image storage and delivery

Each of these services has its own privacy policy. We only share the minimum data necessary for them to perform their function.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. payment records, which are retained for 7 years).

6. Cookies

BusyBeds uses cookies to maintain your login session (httpOnly, secure, SameSite). We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser, but this will prevent you from staying logged in.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data via your profile settings
Request deletion of your account and associated data
Opt out of marketing emails at any time
Request a copy of your data in a portable format

To exercise any of these rights, contact us at privacy@busybeds.com

8. Data Security

We protect your data using industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and JWT authentication with httpOnly cookies. No system is 100% secure, and we encourage you to use a strong, unique password.

9. Children's Privacy

BusyBeds is not intended for children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. Continued use of BusyBeds after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: privacy@busybeds.com