Privacy Policy

1. Overview

OmegaStay Ltd ("OmegaStay", "we", "us") operates a platform for discovering and booking hotels, apartments, and other stays. This Privacy Policy explains what personal information we collect, why we collect it, how we protect it, and the choices you have.

It applies to guests, hosts, and visitors who use our website, mobile experience, and related services. By using OmegaStay you acknowledge this policy. If you do not agree with it, please do not use the platform.

In short: we collect only what we need to run bookings and keep the platform safe, we never sell your personal data, and you can ask us to access, correct, or delete it at any time.

2. Information We Collect

Information you give us

Account details: full name, email address, phone number, and password
Booking details: properties viewed or reserved, stay dates, guest names, and special requests
Host verification: government-issued ID, address, and property ownership documents
Payment details: billing information and payout details (card data is handled by our payment partner)
Communications: messages with hosts, our support team, and reviews you submit

Information collected automatically

Device and log data: device identifiers, browser type, IP address, and pages visited
Usage analytics: searches, clicks, and how you interact with listings and features
Location data: approximate or precise location, only where you grant permission, to show nearby stays

Information from third parties

Payment confirmation and fraud signals from our payment processor
Identity verification results from verification providers
Information from hosts or guests relevant to a booking or dispute

3. How We Use Your Information

We use your information to:

Create and manage your account
Process bookings, payments, refunds, and host payouts
Send confirmations, reminders, receipts, and service notices
Provide customer support and resolve disputes
Verify identities and prevent fraud, abuse, and unauthorized access
Personalize search results, recommendations, and AI-assisted booking features
Improve, test, and secure our platform
Comply with legal, tax, and regulatory obligations
Send offers and updates where you have opted in (you can unsubscribe at any time)

Our lawful bases

We process personal data based on one or more of the following: performance of a contract with you, your consent, our legitimate interests in running and securing the platform, and compliance with legal obligations.

4. How We Share Information

We do not sell your personal information. We share it only as needed:

With hosts and guests: name, contact details, and booking details needed to complete a stay
With service providers: payment processing, hosting, analytics, communications, identity verification, and AI-assistance providers acting on our instructions
For legal reasons: to respond to lawful requests from courts, regulators, or law enforcement, or to protect rights, safety, and property
In a business transfer: if OmegaStay is involved in a merger, acquisition, or sale of assets, subject to this policy
With your consent: in any other case where you ask or agree to it

5. Payments

Payments are processed by Flutterwave, a third-party payment gateway. Your full card details are entered and handled by the payment provider and are not stored on OmegaStay servers. We receive limited information such as transaction status, amount, and a payment reference.

Secure by design: payment traffic is protected with industry-standard encryption in transit.

6. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the platform is used, and improve performance.

Essential: required for sign-in, security, and checkout
Preferences: remember settings such as search filters
Analytics: help us understand usage so we can improve

You can block or delete cookies in your browser settings. Disabling essential cookies may stop parts of the platform from working.

7. Data Retention

We keep personal information only as long as necessary for the purposes described in this policy. Typically this means:

Account data for as long as your account is active, and a reasonable period afterwards
Booking and payment records for as long as required by tax, accounting, and legal obligations
Records relating to disputes, fraud, or safety for as long as needed to protect the platform and its users

When data is no longer needed, we delete or anonymize it.

8. Security and Protection

We use appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit
Access controls and least-privilege permissions for staff
Monitoring and logging to detect suspicious activity
Secure hosting infrastructure and regular reviews of our practices

Please note: no system is completely secure. Use a strong, unique password, never share your login details, and contact us immediately if you suspect unauthorized access to your account.

9. International Transfers

Some of our service providers operate outside Nigeria. When we transfer personal data across borders, we take steps to ensure it remains protected in line with applicable data protection laws, including the Nigeria Data Protection Act 2023.

10. Your Rights

Subject to applicable law, you have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your information where applicable
Object to or restrict certain processing
Withdraw consent at any time, without affecting earlier processing
Receive a copy of your information in a portable format
Lodge a complaint with the Nigeria Data Protection Commission or your local regulator

To exercise any of these rights, email us at the address in the Contact section. We may need to verify your identity first, and we aim to respond within 30 days.

11. Children's Privacy

OmegaStay is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Third-Party Links

Our platform may link to third-party websites or services, such as social media or maps. We do not control their privacy practices and encourage you to read their policies.

13. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email or in the app. Continued use of OmegaStay after changes means you accept the updated policy.