Privacy Policy
Last updated: March 2026
Who We Are
Havely is a hotel booking platform operated at havely.app. This Privacy Policy describes how Havely collects, uses, processes, and shares personal information when you use our Platform.
What This Policy Covers
This policy applies to all registered users of the Platform and describes the data we collect, why we collect it, how it is shared, and your rights regarding your personal data.
Data We Collect
We collect the following categories of personal data:
Search Data
When you search for hotels, the following data is sent to our third-party supplier (LiteAPI) to return results:
- Check-in and check-out dates
- Number of rooms and guest occupancies (adults/children per room)
- Selected currency
- Destination (city, country code, or hotel ID)
Booking Data
When you make a booking, the following data is collected and transmitted to the supplier to complete the reservation:
- Lead guest / holder name
- Email address
- Phone number
- Guest names for each room
Account Data
When you create an account, we collect:
- Email address
- Password (hashed; never stored in plain text)
- Display name (if provided)
- OAuth provider identity (if using Google sign-in)
Technical Data
We automatically collect certain technical information when you use the Platform:
- IP address
- User agent (browser type and version)
- Request identifiers (for debugging and support)
How We Use Your Data
We use the data we collect for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Returning hotel search results | Search data (dates, occupancy, currency, destination) | Contract performance |
| Confirming availability and pricing (prebook) | Search data, selected rate/offer | Contract performance |
| Completing hotel bookings | Booking data (holder name, email, phone, guest names) | Contract performance |
| Processing payments | Payment details (handled by LiteAPI Payment SDK; Havely does not store full card details) | Contract performance |
| Customer support and booking lookups | Account data, booking data, technical data | Contract performance, legitimate interest |
| Fraud prevention and security | Technical data, account data, booking patterns | Legitimate interest, legal obligation |
| Platform maintenance and debugging | Technical data, request identifiers | Legitimate interest |
Data Sharing
Your data may be shared with the following parties:
- LiteAPI: Search data and booking data are transmitted to LiteAPI to facilitate hotel search, prebook, and booking operations. LiteAPI forwards booking data to the relevant hotel/supplier.
- Payment processors: Payment data is handled by the LiteAPI Payment SDK and its underlying payment provider. Havely does not store your full card details.
- Authentication provider (InsForge): Account credentials and session data are managed by our authentication backend.
We do not sell your personal data to third parties. We do not share your data for advertising or marketing purposes with external parties.
Data Retention
We retain your data as follows:
- Booking records: Stored durably for the lifetime of your account, or as required by law, to support booking lookups and customer service.
- Booking events and audit log: Stored durably for compliance, dispute resolution, and debugging.
- Session data: Session tokens and identifiers have a limited time-to-live (TTL) and expire automatically.
- Cached search data: Short-lived cache entries (minutes to hours) that expire automatically. Not retained long-term.
Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Restriction: Request that we restrict processing of your personal data.
- Portability: Request a machine-readable copy of your data.
- Objection: Object to processing based on legitimate interests.
To exercise any of these rights, please contact us at emmanuelsekyi@havely.app. We will respond within a reasonable timeframe.
Cookies
We use cookies and similar technologies as described in our Cookie Policy. See the Cookie Policy for details on what cookies we use and how to manage your preferences.
Security
We use appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), hashed passwords, secure session management, and rate limiting.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect when posted on the Platform. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, please contact us at emmanuelsekyi@havely.app.