Privacy Policy

Mosahill (hereinafter referred to as "the Platform") takes the protection of your personal data very seriously. This policy describes how the Platform collects, uses, stores, protects, and shares your personal data.

1. Categories of Personal Data Collected

  • Identification data: Name, gender, date of birth, nationality.
  • Contact data: Email, phone, mailing address.
  • Identity verification: Passport or national ID copies (for check-in verification only).
  • Payment data: Full credit card information (card number, security code, cardholder name, etc.) is handled directly by the third-party payment provider (Stripe) and does not pass through the Platform's servers. The Platform stores only the de-identified credentials provided by Stripe, including payment method identifier, customer identifier, payment intent identifier, and display-only card brand, last four digits, and expiration month and year.
  • Booking records: Booking time, property, length of stay, additional services, special requests.
  • Usage records: IP address, browser type, device information, browsing and click history, cookies.

2. Purposes of Collection

  • To process bookings, payments, check-ins, and check-outs.
  • To provide customer support and resolve issues.
  • To comply with tax, legal, and government reporting obligations.
  • To send order notifications, booking confirmations, and marketing communications.
  • To improve the Platform's service quality and user experience.

3. Retention Period, Region, and Recipients

  • Period: The Platform retains your personal data for seven years after the last completed transaction (as required by tax and consumer-dispute laws). Data beyond this period will be de-identified or deleted.
  • Region: Your data is stored on the Platform's cloud servers, provided by DigitalOcean.
  • Recipients
    • Property operators (owners and property management companies) — limited to what is necessary for booking processing.
    • Third-party payment service providers (Stripe) — limited to what is necessary for payment processing.
    • Third-party booking platforms (if you booked through another platform) — limited to order-information synchronization.
    • Government authorities — as required by law.

4. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to provide personalized experiences, analyze traffic, and serve advertisements. You can manage cookies through your browser settings, but certain features (such as auto-login) may be limited as a result.

5. Your Rights

You have the following rights under applicable personal data protection laws:

  • Request access to, or a copy of, your personal data.
  • Request correction or supplementation of inaccurate data.
  • Request cessation of collection, processing, or use.
  • Request deletion of your data (subject to legal retention requirements).

To exercise these rights, please reach us through the contact form on this site. The Platform will respond within 30 days.

6. Data Protection Measures

  • Full-site HTTPS encryption.
  • Tiered access control for employees.

7. International Data Transfers

If your location differs from the Platform's server location, your data may be transferred across borders. The Platform ensures that cross-border data transfers comply with applicable local laws and the protection standards of this policy.

8. Third-Party Links

The Platform may contain links to third-party websites. The Platform is not responsible for the privacy practices of third-party websites. Please review the privacy policy of any third-party website before entering it.

9. Modification of Policy

The Platform reserves the right to modify this policy at any time. In the event of material changes, you will be notified by Platform announcement or email.

10. Contact

For any questions or complaints, please reach us through the contact form on this site.

Handling of Recruitment Applicants’ Personal Data

Personal data and resumes submitted through the recruitment application form are used solely to evaluate your application and to contact you. We do not collect special-care personal information, and we do not provide your data to third parties. Application data is retained for up to one year and is then destroyed once a hiring decision is finalized or upon expiry of that period.

Handling of Inquiry Data

Personal data submitted through the contact form is used solely to respond to your inquiry. It is retained for up to one year and then deleted.