Privacy Policy

Who this covers

• Owners and staff of guesthouses who hold a Vayves account. For this data we decide how it is used.
• Guests who book or stay at a guesthouse that uses Vayves. The guesthouse decides what guest data it collects and why; we store and process it on the guesthouse's behalf to provide the service. For requests about your stay, contact the guesthouse first; we will help them respond.

What we collect

• Account details: name, email address, password (stored only as a one-way hash), role.
• Business details: guesthouse name, address, contact details, rooms, rates, photos and settings you enter, and public listing information from amaldives.com when you claim a listing.
• Booking and guest details entered by guests or staff: names, contact details, stay dates, arrival and flight details, passport or ID details where the guesthouse collects them for check-in, requests, payments and invoices.
• Billing details: when you start a trial or subscription, your card is entered on and stored by our payment processor, Stripe. We never see or store your full card number; we keep the Stripe customer and subscription references and your plan status.
• Technical data: IP address, browser and device information, and log records used for security, rate limiting and fixing faults. We use cookies needed to keep you signed in, and Google Analytics cookies to understand how our pages are used (visits, pages viewed, rough location from IP). You can block analytics cookies in your browser without affecting the service.
• Messages you send us, such as support requests, claim or verification requests.

How we use it

We use personal data to provide and run the service, and for nothing unrelated to it:

• to create and secure your account, including confirming your email address;
• to run bookings, the front desk, guest messages and channel sync for your guesthouse;
• to take subscription payments and send receipts, trial and billing notices;
• to send service emails (confirmations, password and account notices);
• to contact owners who sign up or ask to be contacted about getting started with Vayves;
• to prevent fraud, spam and abuse, and to keep the service working and secure;
• to meet legal, tax and accounting obligations.

We do not sell personal data.

Who we share it with

We share data only with providers that help us run Vayves, and only as needed:

• Stripe, for card payments and subscriptions;
• Vercel, for hosting the application;
• Amazon Web Services, for file and photo storage;
• Resend, for sending email;
• Cloudflare, for DNS, email routing and bot protection on sign-up forms;
• Google, for website analytics;
• booking channels such as Booking.com, Agoda or Airbnb, and amaldives.com, when a guesthouse connects them, so availability and bookings stay in sync;
• Oz Systems's own sales and support systems, for owner sign-ups and enquiries;
• authorities, where the law requires it.

These providers may process data outside the Maldives. We use providers with appropriate security and data-protection commitments.

How long we keep it

We keep account and business data while your account is active. After an account is closed we delete or anonymise it within a reasonable period, except records we must keep for legal, tax or accounting reasons, or to resolve disputes. Guesthouses decide how long guest records are kept, within those limits.

Security

Data is sent over encrypted connections (HTTPS), passwords are hashed, access to each guesthouse's data is limited to its own staff accounts, and card data is handled by Stripe. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

Your choices and rights

You can view and update most account and business details in the admin. You can ask us for a copy of your personal data, to correct it, or to delete your account by emailing hello@vayves.com. You can cancel a subscription at any time from Settings → Billing. We will reply within 30 days.

Children

Vayves accounts are for businesses and adults. We do not knowingly create accounts for children.

Changes

We may update this policy as the service changes. We will change the date at the top, and tell account holders by email about significant changes.