Privacy policy

1. Overview

StayPoint ("we") respects your privacy. This policy describes how we collect, use, and protect personal data when you use our property marketplace and tenant portal in Rwanda and supported markets.

2. Data we collect

• Account data: name, email, phone, password hash, organization details (for landlords), and role.
• Property and tenancy data: addresses, lease terms, invoices, maintenance tickets, documents, and listing content you or your organization upload.
• Booking and payment data: booking dates, amounts, payment method selections, transaction references from Pesapal or manual MoMo confirmations, and receipt records.
• Technical data: IP address, browser type, access logs, and cookies needed for authentication and security.

3. How we use data

We use personal data to:

• Provide and improve the marketplace, PMS, and tenant portal
• Process bookings, invoices, and payment status updates
• Send service emails (verification, portal invites, overdue reminders)
• Comply with legal obligations and prevent fraud or abuse

Landlords and property managers are independent controllers for tenant data they enter about their renters. StayPoint processes that data on their instructions as a platform provider.

4. Payment processors

Card and mobile-money checkout is handled by Pesapal or other enabled providers. We receive payment status and reference IDs; full card or wallet credentials are not stored on StayPoint servers. Manual MoMo payments may include dial codes and confirmation messages you or staff enter for reconciliation.

5. Sharing and retention

We share data with service providers (hosting, email, payment rails) under contract, with your landlord or property manager when you are a tenant or guest, and with authorities when required by Rwandan law.

We retain data while your account or organization relationship is active and for a reasonable period afterward for legal, tax, and dispute-resolution purposes.

6. Your rights

Depending on applicable law, you may request access, correction, or deletion of your personal data. Contact your property manager for tenancy records, or StayPoint support for account-level requests.

7. Security

We use encryption in transit (HTTPS), access controls, and audit logging. No system is perfectly secure; please use strong passwords and report suspected breaches promptly.

8. Governing law

This policy is governed by the laws of the Republic of Rwanda. For questions, contact StayPoint via the details on staypoint.rw.