Privacy Policy

Rihaesh Tech (Pvt) Ltd (“Rihaesh,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use rihaesh.com, our applications, and related services (collectively, the “Platform”).

Rihaesh operates a digital marketplace that connects guests with independent hosts offering short-term accommodation and other property stays listed on the Platform. This Policy describes our information practices when you browse listings, create an account, make or manage a booking, list a property, contact support, or otherwise use the Platform. By using the Platform, you acknowledge the practices described in this Policy. Where applicable law requires consent for particular processing, we will seek that consent. If you do not agree with this Policy, please discontinue use of the Platform.

We may collect the following categories of information, depending on how you use the Platform:

- Account and contact details: name, email address, phone number, login credentials, and profile information. - Identity and verification information: CNIC/passport details, verification photographs or selfies, and documents reasonably requested to verify a guest, host, or property. Please provide such documents only through the channels we designate. - Host and property information: property address, descriptions, photographs, amenities, pricing, availability, ownership or authorization documents, and applicable registration or compliance information. - Booking information: property booked, check-in and check-out dates and times, guest count, booking status, special requests, and relevant communications. - Payment and transaction information: booking amount, advance paid, outstanding balance, refunds, payout details, and transaction references. Payment-card or account credentials may be handled by third-party payment providers rather than stored by Rihaesh. - Support and communications: messages, complaints, feedback, reviews, and information you provide when contacting us.

- Device and log information: IP address, browser type, operating system, device identifiers, access times, and diagnostic logs. - Usage information: pages or listings viewed, searches, clicks, referral pages, and interactions with Platform features. - Approximate location: location inferred from your device or connection, or more precise location if you enable a relevant device permission. - Cookies and similar technologies: information used to maintain sessions, remember preferences, measure traffic, and improve performance. Please do not send us personal information about another person unless you are authorized to do so.

We may use information to: - Create and administer accounts and provide Platform features. - Display listings and help guests discover suitable properties. - Process, confirm, administer, and document bookings, payments, refunds, and host payouts. - Share necessary booking details with the relevant host or guest to coordinate a reservation and check-in. - Verify accounts, hosts, and property listings, and assess fraud, safety, and compliance risks. - Respond to questions, complaints, incidents, and requests for support. - Send service messages about accounts, bookings, check-in instructions, policy changes, and security. - Send marketing messages, offers, and promotions where permitted by law and, where required, with your consent. You may opt out of marketing communications. - Analyze Platform use, troubleshoot issues, maintain security, and improve our services. - Enforce our Terms & Conditions and policies, resolve disputes, and protect the rights, property, and safety of users and Rihaesh. - Meet applicable legal, regulatory, tax, accounting, and law-enforcement obligations.

We may share information in the following circumstances and only as reasonably necessary for the relevant purpose: - Between guests and hosts: booking-related information needed to accept, manage, and fulfill a reservation, including relevant contact and check-in details. - Service providers: vendors that support hosting, platform operations, customer support, analytics, communications, payment processing, fraud prevention, or security. - Legal and safety reasons: where disclosure is required by law, legal process, or a lawful request, or is reasonably necessary to investigate fraud, protect people, or enforce our agreements. - Business transactions: in connection with a proposed or completed merger, restructuring, financing, acquisition, or sale of all or part of our business, subject to appropriate safeguards. - With your direction or consent: when you ask us to share information or otherwise authorize a disclosure. We do not sell personal information to third parties for money. Information may be processed by service providers on our behalf as described in this Policy.

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your login credentials and notifying us promptly if you suspect unauthorized access to your account.

Subject to applicable law and any lawful retention requirements, you may be able to: - Access personal information associated with your account. - Request correction of inaccurate or incomplete information. - Request deletion of your account or personal information. - Object to or restrict certain processing, where applicable. - Withdraw consent where processing is based on consent. - Opt out of marketing communications using the unsubscribe option or by contacting us. - Request a copy of information you have provided, where applicable. To make a privacy request, contact us using the details in Section 13. We may need to verify your identity before acting on a request. Some information may need to be retained to complete bookings, handle disputes, prevent fraud, comply with law, or maintain required business records.

The Platform may use or link to third-party services, such as payment providers, maps, analytics tools, messaging services, social networks, or external websites. Those third parties may process information under their own privacy policies and terms. Rihaesh does not control the privacy practices of independent third parties; please review their policies before using their services.

The Platform is intended for people aged 18 or older. We do not knowingly collect personal information from children under 18 for account or booking purposes. If you believe a child has provided personal information to us, contact us so we can assess and take appropriate action.

Our service providers may process or store information in Pakistan or other countries. Data protection rules in those locations may differ from those where you live. Where required by applicable law, we will take appropriate steps for cross-border transfers and processing.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Platform, maintaining booking and transaction records, resolving disputes, preventing fraud, enforcing agreements, and meeting legal, tax, or accounting requirements. Retention periods vary according to the type of information and the circumstances. When information is no longer required, we will take reasonable steps to delete it, anonymize it, or securely dispose of it, subject to applicable law.

We may update this Policy from time to time. We will publish the updated version on the Platform and revise the “Last updated” date. If a change requires notice or consent under applicable law, we will provide that notice or seek consent as required. Please review this Policy periodically.

For privacy questions or requests, contact Rihaesh Tech (Pvt) Ltd: - Website: https://rihaesh.com - Email: support@rihaesh.com This Policy is a general working draft and should be reviewed for compliance with applicable Pakistani law and the Platform’s actual data practices before publication.