Privacy Policy

Last updated: 03 June 2026  ·  Effective immediately

1 Who We Are

Wenjoy.ae is a short-term rental marketplace operating in the United Arab Emirates. We connect property vendors with guests and facilitate secure bookings. Our platform serves customers (guests), vendors (property hosts), agents (resellers), and administrators.

For privacy-related queries, contact us at [email protected].

2 Information We Collect

2.1 Information You Provide Directly

When you register, book, list a property, or contact us, we may collect:

• Full name — to identify you and personalise communications.
• Email address — for booking confirmations, notifications, account management, and future promotional communications.
• Phone number — to facilitate check-in coordination and customer support, and for relevant promotional outreach.
• Payment information — processed securely through our payment gateway. We do not store full card numbers on our servers.
• Identity documents — for vendor and agent KYC (Know Your Customer) verification, as required by UAE regulations.
• Bank account details — for vendors and agents to receive payouts.
• Property information — details, photos, pricing, and availability provided by vendors when listing a property.

2.2 Information Collected Automatically

When you use our platform, we automatically collect certain technical information including:

• IP address and approximate geographic location.
• Browser type, device type, and operating system.
• Pages visited, time spent, and actions taken on our platform.
• Referral source (how you arrived at our website).

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Google (Login & Calendar) — if you sign in using Google or connect Google Calendar, we receive your name, email address, profile picture, and calendar event data as described in Sections 4A and 4B below.
• Facebook — if you sign in using Facebook, we receive your name, email address, and public profile information.
• Google Analytics — aggregated, anonymised usage data to analyse website traffic and improve user experience.
• Payment processors — transaction verification data from our payment gateway (NomuPay/Tabby).
• Google Vision API — for vendor KYC identity verification, document images are processed through Google's Cloud Vision API for text extraction and face detection. No images are stored by Google.

3 How We Use Your Information

We use the personal information we collect for the following purposes:

• To process bookings — managing reservations, payments, confirmations, and related communications.
• To operate the platform — account management, customer support, and dispute resolution.
• To send communications — booking confirmations, receipts, policy updates, and service announcements.
• For promotional purposes — with your email address and phone number, we may send you relevant offers, new property announcements, or platform updates. You may opt out at any time by contacting [email protected].
• To improve our services — analysing usage patterns via Google Analytics to enhance the platform experience.
• For legal and compliance purposes — meeting obligations under UAE law, including KYC verification and financial record-keeping.
• For security — detecting, preventing, and investigating fraud or misuse of the platform.

4 Google Services

Wenjoy.ae integrates with several Google services. This section explains each integration, what data is accessed, and how you can control it.

4A. Google Sign-In (OAuth 2.0)

We offer the option to sign in to Wenjoy using your Google account. When you choose "Login with Google", we use Google's OAuth 2.0 authentication service. This is entirely optional — you can always create a standard Wenjoy account instead.

Data we receive from Google when you sign in:

• Your name (first and last name from your Google profile).
• Your email address (used as your Wenjoy account email).
• Your profile picture (if available, displayed on your account).

How we use this data:

• To create or link your Wenjoy account, so you don't need a separate password.
• To personalise your experience by displaying your name and profile picture.
• To send booking confirmations and account notifications to your email.

What we do NOT do:

• We do not access your Gmail inbox, Google Drive, Google Contacts, or any other Google data beyond what is listed above.
• We do not post anything on your behalf.
• We do not share your Google data with any third party.

How to revoke access: You can disconnect Google from your Wenjoy account at any time by visiting Google Account Permissions and removing "Wenjoy" from the list of connected apps. You can also contact us at [email protected] to delete your account data.

4B. Google Calendar Integration

Wenjoy offers an optional Google Calendar integration for vendors (property hosts) and administrators. This feature allows property availability and bookings to be synchronised with Google Calendar to prevent double-bookings.

Data we access from Google Calendar:

• Calendar events — we read event dates, times, and titles from your selected calendar to detect availability conflicts.
• Create events — when a booking is confirmed, we create a calendar event with the booking dates and property name.
• Delete events — when a booking is cancelled, we remove the corresponding calendar event.
• Email and profile — to identify your Google account and display your connected account name.

How we use this data:

• Solely to synchronise property availability between Wenjoy and your Google Calendar.
• To prevent double-bookings by detecting conflicts with existing calendar events.
• Calendar data is processed on our servers and is not shared with any third party.

What we do NOT do:

• We do not access calendars other than the one you explicitly select for synchronisation.
• We do not read, modify, or delete any events that were not created by Wenjoy.
• We do not share your calendar data with guests, agents, or any third party.
• We do not use calendar data for advertising, profiling, or any purpose other than booking synchronisation.

Revoking access: You can disconnect Google Calendar from your Wenjoy vendor dashboard at any time. You can also revoke access from Google Account Permissions. Disconnecting will stop all future synchronisation but will not delete existing Wenjoy bookings.

Data retention & deletion: Wenjoy follows a strict retention policy for Google Calendar data:

• OAuth tokens — access and refresh tokens are deleted within 24 hours of you disconnecting Google Calendar from your Wenjoy dashboard or revoking access from your Google Account.
• Cached event data — any calendar event data temporarily cached on our servers for conflict detection is purged within 30 days of disconnection, and immediately upon account deletion.
• Account deletion — when your Wenjoy account is deleted, all Google Calendar data, tokens, and derived records associated with your account are permanently removed within 30 days.
• No backups retained — we do not maintain long-term backups of Google Calendar event content beyond what is required for operational continuity (max 7 days), after which backup copies are also purged.

You can request immediate deletion of all stored Google data at any time by emailing [email protected].

4C. Google Vision API (KYC Verification)

For vendor and agent identity verification (KYC), we use Google Cloud Vision API to extract text from identity documents (such as Emirates ID or passport) and to detect faces for biometric comparison with the selfie you provide.

Data processed:

• Your identity document image is sent to Google's Vision API for text recognition (OCR) and face detection.
• Your selfie image is processed for face detection and comparison.

Important: Google processes these images transiently and does not store them. The extracted text and face comparison results are stored securely in our database for KYC record-keeping. Images are stored on our server only and are accessible only to administrators for verification purposes.

4D. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to help us analyse how users interact with our website. The information generated by the cookie about your use of our website is transmitted to and stored by Google on servers in the United States.

Google Analytics collects data such as pages visited, session duration, device type, and geographic region. This information is used solely to improve our platform and understand user behaviour in aggregate. We do not use Google Analytics to identify individual users.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information on how Google processes data, please refer to Google's Privacy Policy.

4E. Google API Services — Limited Use Disclosure

Wenjoy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use Google user data:

• We only use Google user data to provide or improve the specific user-facing features described in this Privacy Policy — namely Google Sign-In (4A), Google Calendar synchronisation (4B), and KYC document verification via Google Cloud Vision (4C).
• We do not use Google user data for any purpose unrelated to those features.

Prohibited uses — Wenjoy does NOT use Google user data for any of the following:

• Advertising — including targeted advertising, personalised advertising, retargeted advertising, or interest-based advertising.
• Selling or sharing data with data brokers, information resellers, or any third party for commercial purposes.
• Credit-worthiness, lending, or financial-eligibility determinations.
• Training or improving generalised / non-personalised AI or machine-learning models — Google user data is never used to train, fine-tune, or evaluate any AI or ML system, whether developed by Wenjoy or by any third party.
• Building or augmenting third-party databases or datasets.
• Determining eligibility for insurance, employment, housing, or any similar decision.

Transfer of Google user data:

• We do not transfer Google user data to any third party except (a) as necessary to provide or improve the user-facing features described above, (b) for security purposes (such as investigating abuse), (c) to comply with applicable law or legal process, or (d) as part of a merger, acquisition, or sale of assets, with appropriate notice to users.

Human access to Google user data:

• We do not allow any human (employee, contractor, or third party) to read Google user data unless: you have given us your affirmative agreement for specific messages or events; it is necessary for security investigations or to comply with applicable law; or the data has been aggregated and is used for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.

5 Facebook Login

We offer the option to sign in using your Facebook account. When you choose "Login with Facebook", we receive your name, email address, and public profile information via Facebook's OAuth service. This data is used solely to create or link your Wenjoy account. We do not access your Facebook friends list, posts, photos, or any private data. You can revoke access at any time from your Facebook App Settings.

6 Cookies

We use cookies and similar tracking technologies to enhance your browsing experience. For a full explanation of the cookies we use and how to manage them, please refer to our Cookie Policy.

7 Sharing Your Information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• With vendors: Guest booking details (name, check-in/check-out dates, guest count) are shared with the relevant property vendor to facilitate your stay.
• With agents: Where a booking is made through an agent's referral link, relevant booking details may be shared with the agent for commission processing.
• With payment processors: Payment information is shared with our secure payment gateway to process transactions.
• With Google Analytics: Aggregated, anonymised usage data is shared for platform analysis.
• With legal authorities: We may disclose information if required by UAE law, a court order, or regulatory authority.
• In a business transfer: If Wenjoy is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

8 Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure payment processing, and access controls limiting who within Wenjoy can access personal data.

While we take all reasonable precautions, no method of data transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

9 Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When your data is no longer required, it is securely deleted or anonymised.

Financial records, including booking and transaction data, may be retained for a minimum of 5 years in accordance with UAE financial regulation requirements.

10 Your Rights

Subject to applicable UAE data protection laws, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to legal retention requirements.
• Opt out of promotional communications at any time.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe in accordance with UAE law.

11 UAE Data Protection Compliance

Wenjoy.ae is committed to complying with all applicable UAE data protection laws and regulations, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). We process personal data only for legitimate purposes, with appropriate safeguards, and in a manner proportionate to those purposes.

12 Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.

13 Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of our platform following any changes constitutes your acceptance of the revised policy.

---