Privacy Policy

KoziBnB is a property management platform that helps short-term rental hosts in Morocco collect digital guest registrations and comply with local tourism regulations. Our registered address and contact information are available on our contact page.

Host account data: When you create an account, we collect your name, email address, and password (hashed).

Property data: Property names, addresses, and guest registration link slugs you create.

Guest registration data: Personal information submitted by your guests, including full name, date of birth, place of birth, nationality, identity document type and number, expiry date, home address, and photos of identity documents. This data is collected on behalf of the host for regulatory compliance purposes.

Usage data: Standard server logs including IP addresses, browser type, and pages accessed.

We use collected data to:

• Provide and operate the KoziBnB platform.
• Store guest registration records on behalf of hosts for compliance with Moroccan tourism regulations (Dahir n° 1-02-176).
• Send transactional emails such as new registration notifications.
• Improve platform security and performance.

We do not sell, rent, or share your data or your guests' data with third parties for marketing purposes.

Guest registration data is retained for as long as required by applicable tourism regulations. Hosts may request deletion of their account and associated data by contacting us. Guest data submitted for regulatory compliance may be retained as required by law.

We store data on Supabase, a secure cloud database provider with encryption at rest and in transit. Identity document photos are stored in private, access-controlled storage. We implement role-based access controls to ensure only authorized hosts can view their own guests' data.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict processing of your data.

To exercise these rights, contact us through our contact page.

We use essential session cookies to keep you logged in. We do not use tracking or advertising cookies.

We use the following third-party services to operate the platform:

• Supabase — database, authentication, and file storage.
• Brevo — transactional email delivery.

Each of these providers has their own privacy policy and data processing agreements in place.

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice.

For privacy-related questions or requests, contact us at our contact page.