1. Introduction

This policy explains how BesaStay collects, uses, stores, and protects personal data while you use the platform.

2. Data we collect

We may collect account data, host data, booking data, messages, support requests, technical data such as IP/device/cookies, and invoice or commission data.

3. How we use data

Data is used for account management, bookings, listings, communication, notifications, email, pricing, commissions, invoices, support, security, fraud prevention, and legal obligations.

4. Legal basis

Processing may be based on service performance, consent, legitimate interest, legal obligation, and dispute handling.

5. Data sharing

Data is shared only as needed with guests, hosts, service providers, authorities when required, and legal or accounting advisors.

6. Messages and notifications

BesaStay processes chat, booking notifications, support emails, and invoice or commission notifications.

7. Data retention

Data is kept as long as needed for service, legal, financial, tax, security, and dispute reasons.

8. User rights

You may request access, correction, deletion, restriction, objection, or information about your data, subject to applicable law.

9. Security

We use reasonable technical and organizational measures, but no online system is perfectly secure.

10. International transfers

Some providers may process data outside Kosovo.

11. Changes

This policy may be updated from time to time.

12. Contact

Email: [privacy@besastay.com]