Privacy Policy

1. Introduction

Welcome to ndotoni Stays. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and share your information when you use our short-term stays platform.

2. Information We Collect

2.1 Information You Provide

• Name and email address (when you create an account)
• Phone number and WhatsApp number (for booking and check-in communication)
• Profile picture (if you sign in with Google, Apple, or Facebook)
• National ID/NIDA number (optional, if you choose to provide one)
• Listing information and photos (if you're a host)
• Messages and inquiries sent through our platform
• Booking and payment information
• Reviews and ratings

2.2 Information Collected Automatically

• Device information (browser type, operating system)
• IP address and location data
• Usage data (pages visited, features used)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

• Social media profile information (when you sign in with Google, Apple, or Facebook)
• Payment information from payment processors (M-Pesa, Stripe)

3. How We Use Your Information

We use your information to:

• Provide and improve our booking platform
• Create and manage your account
• Facilitate communication between hosts and guests
• Process bookings and payments securely
• Send important notifications about your account and bookings
• Respond to your inquiries and provide customer support
• Prevent fraud and ensure platform security
• Analyze usage patterns to improve user experience
• Comply with legal obligations
• Send marketing communications (with your consent)

4. How We Store Your Information

Your data is securely stored on Amazon Web Services (AWS) infrastructure with industry-standard security measures:

• Encryption at rest and in transit (TLS/SSL)
• Regular security audits and monitoring
• Access controls and multi-factor authentication
• Automated backup and disaster recovery systems
• Data centers located in secure facilities

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

5.1 Other Users

• Hosts can see a guest's name, contact details, and booking details for their listing
• Guests can see a host's name, contact details, and listing information for properties they book or inquire about
• Public profile information is visible to all users

5.2 Service Providers

• Cloud hosting services (Amazon Web Services)
• Payment processors (M-Pesa, Stripe, and other payment gateways)
• WhatsApp Business API (for host-guest communication and support)
• Email service providers
• Analytics services

5.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights and the safety of our users.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Object: Object to certain data processing activities
• Restrict: Request restriction of data processing

To exercise these rights, contact us at info@ndotoni.com or visit your account settings.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Analyze site usage and performance
• Provide personalized content and recommendations
• Measure the effectiveness of our marketing campaigns

You can control cookies through your browser settings. Note that disabling cookies may affect some features of our platform.

8. Third-Party Services

We integrate with third-party services for authentication and payments:

• Google Sign-In: Governed by Google's Privacy Policy
• Apple Sign-In: Governed by Apple's Privacy Policy
• Facebook Login: Governed by Facebook's Privacy Policy
• M-Pesa: Governed by Vodacom's privacy policies
• Stripe: Governed by Stripe's Privacy Policy
• WhatsApp: Governed by WhatsApp's Privacy Policy

When you use these services, their respective privacy policies also apply.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Most personal data is deleted within 30 days
• Transaction records are retained for 7 years (legal requirement)
• Anonymized analytics data may be retained indefinitely
• Backup copies are deleted within 90 days

10. Children's Privacy

ndotoni Stays is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than Tanzania (including where our cloud hosting and payment providers operate). We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

12. Security

We implement appropriate technical and organizational measures to protect your data. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of ndotoni Stays after changes constitutes acceptance of the updated policy.

14. Business Information

Ndotoni is operated by a legally registered company in Tanzania, operating with full compliance to local regulations and business standards. Ndotoni Technologies Limited operates both ndotonistays.com (short-term stays) and ndotoni.com (long-term rentals).

15. Contact Us

If you have questions about this privacy policy or how we handle your data: