Visitory Privacy Policy
Draft for legal review. This text was prepared from the actual implementation of the Visitory apps and server (November 2026). Items in [square brackets] must be completed, and the whole document must be reviewed by a qualified Iranian lawyer before it is published or loaded into the server.
Last updated: [date of publication]
This policy explains what personal data [Company legal name] ("Visitory", "we") collects when you use the Visitory apps (Android, desktop, web) and website, why, who we share it with, how long we keep it, and what you can do about it. It applies to travelers, hosts (people who run a business account) and visitors browsing without an account.
1. Who is responsible
[Company legal name], registration number [number], national ID [number], [address]. Contact for privacy questions: [email], or Profile → Settings → Support in the app.
2. What we collect, and why
2.1 Information you give us
| Data | When | Why |
|---|---|---|
| Mobile number | sign-up, sign-in | your account's identity; one-time SMS codes; two-step verification; security notices |
| Password | sign-up | signing in. We store only a one-way hash (bcrypt), never the password itself. |
| Name, profile photo (optional) | sign-up, profile | shown to hosts you book with and on reviews you write |
| National ID, date of birth, gender | identity verification, booking, becoming a host | checking that you are who you say you are with the official registries (see 4); age and gender rules some listings have. The national ID is stored encrypted; we keep its last four digits to show you, and a keyed fingerprint so one national ID can't open several accounts. |
| Guests' names, dates of birth and national IDs | when you book for others | the host's check-in and the listing's rules. A guest's national ID is deleted 90 days after the stay ends; only the last four digits stay with the booking. |
| Contact number and note for a booking | booking | so the host can reach you and knows what you asked for |
| Card (brand, last four digits, expiry) | Payment methods | showing your saved cards. The full card number is never sent to or stored by Visitory; payments are made on the bank gateway's own page. |
| IBAN (Sheba) | hosts' payouts; refunds | paying hosts and returning money. Checked against the owner's national ID with the bank registry. |
| Business details (name, description, address, map location, postal code, phone, website, social links, licences, photos) | becoming a host, creating listings | shown publicly on your business page and listings so travelers can find and book you |
| Reviews, reports, support messages, feedback | when you send them | publishing reviews; handling reports; answering you; improving the service |
2.2 Information collected as you use Visitory
| Data | Why |
|---|---|
| Bookings and payments (dates, amounts, status, refunds) | providing the booking, payment, refund and payout; accounting and tax obligations |
| Saved places, wish-list categories, the last 12 places you viewed | showing them back to you; and, only if Personalised recommendations is on, choosing places to suggest (see 3) |
| Device and session information: device name, platform, app version, sign-in time, last use, IP address | keeping you signed in; "Active sessions" in Settings; telling you about new sign-ins (the IP is shown masked); detecting abuse |
| Notifications we sent you | your notifications list (deleted after 180 days) |
| Location | only when you tap "use my location" on a map, or pick a point: to centre the map, find places near you, or set a business's address. We don't track your location in the background. |
| Technical logs and crash reports | keeping the service running and fixing errors. Logs are scrubbed of codes, tokens and numbers before they are written; crash reports go to our own error-tracking server. |
We do not use advertising identifiers, advertising networks or third-party analytics, and we do not sell personal data.
3. Personalised recommendations
When Settings → Privacy → Personalised recommendations is on (the default), we use the places you saved, booked and recently viewed to suggest similar places ("Picked for you" on Home). If you also turn on Settings → Notifications → Recommendations (off by default) we may send you at most one suggestion a week. Turning personalisation off takes effect immediately: we then suggest only generally popular places and do not use your activity for that. The setting is kept on your account so it is the same on all your devices.
4. Who we share data with
We share only what each party needs to do its job for us, under agreements that limit their use of it:
- Identity and registry services (s.api.ir): your mobile number and national ID (Shahkar match), national ID and date of birth (personal information registry), card or IBAN with the owner's details (ownership checks), licence numbers (licence registry), and the SMS that carries your one-time codes.
- Payment and payout provider (Vandar): the amount, a reference, and where required your mobile number, when you pay or are refunded; hosts' IBAN and payout amounts for settlements. Card details are entered on the bank gateway's page, not in Visitory.
- Map provider (Map.ir): to show maps and find addresses, your device sends map tile requests and the text you search for or the coordinates of the point you pick to Map.ir directly.
- Hosting and storage: our servers and object storage (photos) are hosted in Iran by [hosting provider(s)].
- Hosts and travelers: when you book, the host sees your name, the guests' details you entered, your contact number and note, and your booking. When a host accepts, you see the host's business details and phone number.
- The public: business pages, listings, photos, ratings and reviews (with the reviewer's name) are public.
- Authorities: when Iranian law requires it, on a valid request from a competent authority.
5. How long we keep it
| Data | Kept |
|---|---|
| Account | until you delete it (Settings → Delete account) |
| Guests' national IDs | 90 days after the stay ends |
| Signed-out or expired sessions | 30 days |
| Notifications | 180 days |
| One-time codes | minutes (in memory only) |
| Bookings, payments, payouts, invoices | as long as accounting and tax law requires ([period, e.g. 10 years]), even after an account is deleted, with the personal details removed where the law allows |
| Server metrics | 30 days |
| Admin audit trail | [period] |
Deleting your account removes your name, mobile number, national ID, date of birth, gender, photo, password, saved cards and IBANs, saved places and lists, recently viewed places, support messages, notifications and reports, and signs out every device. Your reviews stay but show "Deleted user"; past bookings stay for accounting with the contact details and guests removed. A host must close the business account first, and anyone must first cancel or finish upcoming bookings.
6. Security
Connections are encrypted (HTTPS). National IDs are encrypted at rest; passwords are hashed. Sign-in is protected with lockouts, optional two-step verification and biometric unlock on your device, and you are told about every new sign-in. The desktop app keeps the sign-in token in the operating system's credential store. Staff access to personal data goes through an admin tool that needs two-step verification and records every action. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
7. Your choices and rights
You can, in the app: see and correct your profile; see and sign out sessions; turn notifications, personalisation and two-step verification on or off; delete saved cards, IBANs and places; and delete your account. You can also ask us, through support or [email], for a copy of your data or for anything else about it; we answer within [30] days. If you are not satisfied, you may complain to the competent Iranian authorities.
8. Children
Visitory is for people aged [18] and over. A booking can include younger guests, entered by the adult who books.
9. Changes
When we change this policy we publish the new version here and in the app, with its date. If the change is significant we will also tell you in the app before it takes effect.
10. Contact
[Company legal name] · [address] · [email] · in the app: Profile → Settings → Support.