1. Introduction and Scope

This Privacy Policy explains how SyriaStay collects, uses, shares, and protects personal data when you use our iOS and Android applications, website, hotel search and booking services, and related booking-management features.

By using SyriaStay, you acknowledge that you have reviewed this policy. It applies to users and customers who browse hotels, create an account, make or manage a booking, or communicate with us or a hotel through the platform.

2. Who We Are

SyriaStay is a hotel-booking platform for stays in Syria. It helps users search for hotels, compare options, view room details, prices and availability, and make and manage bookings. In this policy, “SyriaStay”, “we”, “us”, and “our” refer to the service operator under the SyriaStay brand.

3. Data We Collect

Depending on how you use the service, we may collect the following categories:

• Account and identity data: name, email address, phone number, user identifier, language, and sign-in method.

• Authentication data: information required to sign you in and manage your session, including information made available by Google or Apple when you choose those sign-in options. We do not receive your Google or Apple account password.

• Booking data: hotel, city, room type, stay dates, number of guests, contact details, booking code, booking status, and amendment or cancellation requests.

• Support and communications data: messages, inquiries, and requests you send to SyriaStay or to a hotel through available platform channels.

• Preferences and local data: language, saved hotels, recent searches or cities, and settings you choose. Some preferences may be stored locally on your device or browser.

• Technical and security data: device type, operating system, app version, language, network information where needed for security or operations, error and performance logs, and limited diagnostics when enabled.

• Website data: basic technical information and essential local storage or cookies used to remember language or operate the website. We do not currently use advertising cookies for targeted advertising.

We do not currently request precise GPS location and do not collect payment-card details inside the SyriaStay app.

4. How We Obtain Data

We obtain data directly from you when you create or update an account, search, book, or contact us; from hotels when they confirm or update a booking; from sign-in providers you choose; and in a limited automated manner when you use the app or website for operations, security, and performance improvement.

5. How We Use Your Data

We use data to:

• Create accounts, sign users in, manage sessions, and verify identity where needed.

• Display hotels, rooms, prices, availability, and relevant search results.

• Create, confirm, display, and manage bookings, including amendment or cancellation requests.

• Share necessary information with the hotel to fulfil the booking and communicate about the stay.

• Provide technical support and customer service and respond to inquiries.

• Improve usability, language support, design, performance, and reliability.

• Prevent fraud, abuse, security or technical issues, and comply with legal, regulatory, and operational obligations.

6. Data Sharing

We do not sell personal data or use it for third-party advertising. We may share the minimum data necessary with:

• The hotel or booking partner responsible for fulfilling and managing your stay.

• Technical service providers supporting authentication, hosting, databases, cloud infrastructure, notifications, or support, under appropriate data-protection arrangements.

• Google or Apple when you use their sign-in services, subject to your settings and each provider’s policies.

• Legal, regulatory, or security authorities when required by law or reasonably necessary to protect rights or prevent fraud or abuse.

• A licensed third-party payment provider if online payments are enabled in the future.

7. Third-Party Services

SyriaStay may rely on third-party services, including Google Firebase and Google Cloud services for authentication, infrastructure, and databases; Google and Apple sign-in services; and support or notification tools when enabled. Their handling of data is governed by their terms and privacy policies, and their use is limited to operating the service or providing the requested function.

8. Payments and Bookings

SyriaStay currently supports “pay at arrival” where available. We do not collect or store payment-card numbers or security codes inside the app while online payment is disabled. If online payments are added in the future, payment data will be processed by a licensed third-party payment provider, and we will not store full card details in our systems.

9. Legal Bases and Consent

Where applicable law requires a legal basis, we process data to perform your request or booking contract, operate the service, comply with legal obligations, protect our legitimate interests in security, fraud prevention and service improvement, or based on your consent when consent is required. You may withdraw consent for optional features at any time without affecting processing lawfully carried out before withdrawal.

10. Data Retention

We retain data for as long as necessary to provide the service, manage accounts and bookings, support customers, meet legal, accounting or operational requirements, and prevent fraud or disputes. Retention periods vary by data type and purpose. When an account is deleted, we delete or anonymize personal data where possible, while retaining limited records where legally required or necessary to evidence a booking, resolve a dispute, or prevent fraud.

11. Your Rights and Account Deletion

Depending on applicable law, you may request access to, correction of, deletion of, or restrictions on certain processing of your data. You may initiate account deletion from the app’s account settings, or submit a request through the account-deletion page or by email below.

Before fulfilling sensitive requests, we may ask for reasonable information to verify your identity and protect the account. Account deletion removes associated account data except information that must be retained for legal, security, or operational reasons.

Account deletion page: https://www.stayinsyria.com/delete-account/

12. Data Security

We use appropriate technical and organizational measures to help protect data against unauthorized access, alteration, loss, or misuse. These measures may include access controls, encryption in transit, permission management, and security monitoring appropriate to the system. No electronic transmission or storage method is 100% secure, so absolute security cannot be guaranteed.

13. International Data Transfers

Data may be processed or stored in different countries depending on the locations of service providers and cloud infrastructure. Where this occurs, we take reasonable steps to protect data in line with this policy and applicable legal requirements.

14. Children

SyriaStay is not directed at children as independent users. If we learn that we collected personal data from a child without appropriate parental consent or another valid legal basis, we will take steps to delete or otherwise handle it as required by law.

15. Changes to This Policy

We may update this policy when services, technical practices, or legal requirements change. We will revise the “Last updated” date at the top of the page and may display a notice in the app or on the website when material changes are made.

16. Contact Us

For privacy questions, data-rights requests, or account-deletion requests, contact us at:

Email: privacy@stayinsyria.com

Website: https://www.stayinsyria.com