Privacy Policy

1Who we are

Oumah Sync ("Oumah", "we") is an operations app for homestays, guesthouses, and villas. This policy covers the oumahsync.com website and the Oumah app.

Inside the app, the property owner who subscribes (the "client") decides what guest and staff data is recorded. Oumah stores and processes that data on the client's behalf. For website visitors, Oumah itself is responsible for the data.

2Data we collect

• User accounts: name, email, phone number, role, and the properties they work at.
• Attendance: check-in and check-out times, GPS location at check-in, and facial features stored as numbers. Selfie photos are not stored. Face check-in attempt logs (without photos) are deleted after 60 days.
• Schedules, leave, overtime, requests, and their attachments.
• Guest data recorded by the client: name, phone number, country, stay dates, number of guests, payments, and special requests. Oumah does not store ID card or passport scans.
• Work photos: housekeeping result photos, routine task photos, and purchase receipt photos.
• Property finance data: expenses, petty cash, payroll, and daily wages.
• OTA guest chats, if the client uses the OTA inbox, and text pasted into the AI assistant.
• Website: contact buttons and forms only open WhatsApp with a prefilled message. The website does not store form contents.

3What data is used for

• Running Oumah's features, such as bookings, OTA sync, housekeeping, attendance, schedules, finance, and reports.
• Making sure check-ins are done by the right person at the right place.
• Helping clients during setup and when problems occur, only when asked or needed.
• Sending invoices and payment reminders to clients.
• Keeping the service secure and fixing errors.

We do not sell data and do not use it for advertising.

4Third parties that help us

Some third-party services process data on our behalf, only as far as needed.

• Supabase: database, login, and file storage.
• Cloudflare: hosting for the website and app, and cookieless website visitor statistics.
• Official channel manager provider: sending availability and rates to OTAs, receiving bookings, and OTA guest chats when that feature is used.
• Anthropic: processing text pasted into the AI assistant, along with the rate and availability data needed to draft a reply.
• WhatsApp: the communication channel between you and the Oumah team.

5Where data is stored

The app's database and files are stored on our database provider's servers in Tokyo, Japan. Data is sent over encrypted connections, and access is limited by each user's role.

6How long data is kept

• Housekeeping and routine task photos: 7 days.
• Expense and petty cash receipt photos: 90 days.
• Request attachments: 365 days, or as set by the client (30 days to 5 years).
• Face check-in attempt logs: 60 days.
• Other data: as long as the client's account is active.

After a subscription ends, the client can ask for their data to be exported or deleted.

7Security

• Each property can only be opened by people given access, according to their role.
• Each client's data is kept separate in the database.
• All connections use HTTPS.
• The Oumah team only opens a client's account to help with setup or to solve a problem.

8Your rights

Under Indonesia's Law No. 27 of 2022 on Personal Data Protection, you have the right to ask to view, correct, or delete your personal data, and to withdraw consent you have given.

If you are a staff member or guest of a property, please contact the property owner first, as they manage your data in Oumah. We will help where needed.

9Cookies and browser storage

The app keeps your login session in the browser so you do not have to sign in every time. The website only stores small choices, for example when you close the language suggestion. We do not use advertising cookies.

10Changes to this policy

If this policy changes, the date at the top of this page will be updated. For important changes, we will tell clients in advance.

11Contact us

For questions or requests about personal data, contact the Oumah team on WhatsApp.