Privacy Policy

1. Information we collect

When you create an account we collect your name, username, email address, and password (stored as a salted hash, never in plain text). Depending on how you use the Service, we may also collect: content you publish; property listing details; booking information; and payment-related data, which is processed by our payment provider — we do not store full card numbers ourselves.

2. How we use it

We use your information to operate the Service: to authenticate you, deliver content, process bookings and payments, communicate with you about your account, and improve the Service. We do not sell your personal information.

3. Legal basis for processing

Depending on your location, the legal basis we rely on may include your consent, performance of a contract with you (running your account, a booking), or our legitimate interest in operating and securing the Service. The specific bases applicable in each jurisdiction Discova operates in are under legal review.

4. Who we share it with

We share information with service providers who help us run the Service under contract: our payment processor (to process transactions), our cloud storage and email providers (to host media and send transactional email), and, where a booking is involved, the other party to that booking (host or guest) to the extent needed to complete it. We do not share your information with third parties for their own marketing purposes.

5. Data retention and deletion

You can delete your account at any time from your account settings. When you do, we remove your personal information — email, phone number, password, and username — from your account record so it's no longer associated with your identity. Content you published, and records of bookings or payments you made, may be retained in de-identified form: for example, financial and booking records can have a legal retention requirement independent of an account-deletion request, and previously published content remains attributed to your (now-anonymized) account rather than being silently deleted out from under other users who interacted with it.

6. Cookies

We use cookies and similar technologies that are strictly necessary to keep you signed in and to remember basic preferences. We do not currently use third-party advertising or tracking cookies. A more detailed cookie inventory will be published here once available.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly from your account settings, or by contacting us at the address below.

8. Children's privacy

The Service is not directed at children, and we do not knowingly collect personal information from anyone under the age of consent applicable in their jurisdiction.

9. Security

We use industry-standard measures — including encrypted password storage and encrypted connections — to protect your information. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in a new version.

11. Contact

• Questions about this Privacy Policy: [email protected]