Privacy Policy

Last updated: 24 April 2026  ·  Effective immediately

1 Who We Are

Wenjoy.ae is a short-term rental marketplace operating in the United Arab Emirates. We connect property vendors with guests and facilitate secure bookings. Our platform serves customers (guests), vendors (property hosts), agents (resellers), and administrators.

For privacy-related queries, contact us at legal@wenjoy.ae.

2 Information We Collect

2.1 Information You Provide Directly

When you register, book, list a property, or contact us, we may collect:

• Full name — to identify you and personalise communications.
• Email address — for booking confirmations, notifications, account management, and future promotional communications.
• Phone number — to facilitate check-in coordination and customer support, and for relevant promotional outreach.
• Payment information — processed securely through our payment gateway. We do not store full card numbers on our servers.
• Identity documents — for vendor and agent KYC (Know Your Customer) verification, as required by UAE regulations.
• Bank account details — for vendors and agents to receive payouts.
• Property information — details, photos, pricing, and availability provided by vendors when listing a property.

2.2 Information Collected Automatically

When you use our platform, we automatically collect certain technical information including:

• IP address and approximate geographic location.
• Browser type, device type, and operating system.
• Pages visited, time spent, and actions taken on our platform.
• Referral source (how you arrived at our website).

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Google (Login & Calendar) — if you sign in using Google or connect Google Calendar, we receive your name, email address, profile picture, and calendar event data as described in Sections 4A and 4B below.
• Facebook — if you sign in using Facebook, we receive your name, email address, and public profile information.
• Google Analytics — aggregated, anonymised usage data to analyse website traffic and improve user experience.
• Payment processors — transaction verification data from our payment gateway (NomuPay/Tabby).
• Google Vision API — for vendor KYC identity verification, document images are processed through Google's Cloud Vision API for text extraction and face detection. No images are stored by Google.

3 How We Use Your Information

We use the personal information we collect for the following purposes:

• To process bookings — managing reservations, payments, confirmations, and related communications.
• To operate the platform — account management, customer support, and dispute resolution.
• To send communications — booking confirmations, receipts, policy updates, and service announcements.
• For promotional purposes — with your email address and phone number, we may send you relevant offers, new property announcements, or platform updates. You may opt out at any time by contacting support@wenjoy.ae.
• To improve our services — analysing usage patterns via Google Analytics to enhance the platform experience.
• For legal and compliance purposes — meeting obligations under UAE law, including KYC verification and financial record-keeping.
• For security — detecting, preventing, and investigating fraud or misuse of the platform.

4 Google Services

Wenjoy.ae integrates with several Google services. This section explains each integration, what data is accessed, and how you can control it.

4A. Google Sign-In (OAuth 2.0)

We offer the option to sign in to Wenjoy using your Google account. When you choose "Login with Google", we use Google's OAuth 2.0 authentication service. This is entirely optional — you can always create a standard Wenjoy account instead.

Data we receive from Google when you sign in:

• Your name (first and last name from your Google profile).
• Your email address (used as your Wenjoy account email).
• Your profile picture (if available, displayed on your account).

How we use this data:

• To create or link your Wenjoy account, so you don't need a separate password.
• To personalise your experience by displaying your name and profile picture.
• To send booking confirmations and account notifications to your email.

What we do NOT do:

• We do not access your Gmail inbox, Google Drive, Google Contacts, or any other Google data beyond what is listed above.
• We do not post anything on your behalf.
• We do not share your Google data with any third party.

How to revoke access: You can disconnect Google from your Wenjoy account at any time by visiting Google Account Permissions and removing "Wenjoy" from the list of connected apps. You can also contact us at support@wenjoy.ae to delete your account data.

4B. Google Calendar Integration

Wenjoy offers an optional Google Calendar integration for vendors (property hosts) and administrators. This feature allows property availability and bookings to be synchronised with Google Calendar to prevent double-bookings.

Data we access from Google Calendar:

• Calendar events — we read event dates, times, and titles from your selected calendar to detect availability conflicts.
• Create events — when a booking is confirmed, we create a calendar event with the booking dates and property name.
• Delete events — when a booking is cancelled, we remove the corresponding calendar event.
• Email and profile — to identify your Google account and display your connected account name.

How we use this data:

• Solely to synchronise property availability between Wenjoy and your Google Calendar.
• To prevent double-bookings by detecting conflicts with existing calendar events.
• Calendar data is processed on our servers and is not shared with any third party.

What we do NOT do:

• We do not access calendars other than the one you explicitly select for synchronisation.
• We do not read, modify, or delete any events that were not created by Wenjoy.
• We do not share your calendar data with guests, agents, or any third party.
• We do not use calendar data for advertising, profiling, or any purpose other than booking synchronisation.

Revoking access: You can disconnect Google Calendar from your Wenjoy vendor dashboard at any time. You can also revoke access from Google Account Permissions. Disconnecting will stop all future synchronisation but will not delete existing Wenjoy bookings.

Data retention: When you disconnect Google Calendar, we delete your stored Google OAuth tokens within 24 hours. We do not retain copies of your calendar event data after disconnection.

4C. Google Vision API (KYC Verification)

For vendor and agent identity verification (KYC), we use Google Cloud Vision API to extract text from identity documents (such as Emirates ID or passport) and to detect faces for biometric comparison with the selfie you provide.

Data processed:

• Your identity document image is sent to Google's Vision API for text recognition (OCR) and face detection.
• Your selfie image is processed for face detection and comparison.

Important: Google processes these images transiently and does not store them. The extracted text and face comparison results are stored securely in our database for KYC record-keeping. Images are stored on our server only and are accessible only to administrators for verification purposes.

4D. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to help us analyse how users interact with our website. The information generated by the cookie about your use of our website is transmitted to and stored by Google on servers in the United States.

Google Analytics collects data such as pages visited, session duration, device type, and geographic region. This information is used solely to improve our platform and understand user behaviour in aggregate. We do not use Google Analytics to identify individual users.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information on how Google processes data, please refer to Google's Privacy Policy.

4E. Google API Services — Limited Use Disclosure

Wenjoy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data for the purposes described in this Privacy Policy (authentication, calendar synchronisation, and KYC verification).
• We do not transfer Google user data to third parties except as necessary to provide the services described, with user consent, or as required by law.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your affirmative agreement, it is necessary for security or legal compliance, or the data has been aggregated and anonymised.

5 Facebook Login

We offer the option to sign in using your Facebook account. When you choose "Login with Facebook", we receive your name, email address, and public profile information via Facebook's OAuth service. This data is used solely to create or link your Wenjoy account. We do not access your Facebook friends list, posts, photos, or any private data. You can revoke access at any time from your Facebook App Settings.

6 Cookies

We use cookies and similar tracking technologies to enhance your browsing experience. For a full explanation of the cookies we use and how to manage them, please refer to our Cookie Policy.

7 Sharing Your Information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• With vendors: Guest booking details (name, check-in/check-out dates, guest count) are shared with the relevant property vendor to facilitate your stay.
• With agents: Where a booking is made through an agent's referral link, relevant booking details may be shared with the agent for commission processing.
• With payment processors: Payment information is shared with our secure payment gateway to process transactions.
• With Google Analytics: Aggregated, anonymised usage data is shared for platform analysis.
• With legal authorities: We may disclose information if required by UAE law, a court order, or regulatory authority.
• In a business transfer: If Wenjoy is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

8 Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure payment processing, and access controls limiting who within Wenjoy can access personal data.

While we take all reasonable precautions, no method of data transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

9 Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When your data is no longer required, it is securely deleted or anonymised.

Financial records, including booking and transaction data, may be retained for a minimum of 5 years in accordance with UAE financial regulation requirements.

10 Your Rights

Subject to applicable UAE data protection laws, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to legal retention requirements.
• Opt out of promotional communications at any time.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at legal@wenjoy.ae. We will respond within a reasonable timeframe in accordance with UAE law.

11 UAE Data Protection Compliance

Wenjoy.ae is committed to complying with all applicable UAE data protection laws and regulations, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). We process personal data only for legitimate purposes, with appropriate safeguards, and in a manner proportionate to those purposes.

12 Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.

13 Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of our platform following any changes constitutes your acceptance of the revised policy.

---