Privacy Policy

Kōdō Hospitality
Casablanca, Morocco
legal@kodohospitality.com

When you create an account we collect:

• Full name
• Email address
• Organisation name
• Role / title
• Password (stored as a secure hash — never in plain text)

When you use the platform we collect:

• Login timestamps and session data
• Features accessed and reports downloaded
• AI Analyst query content (to improve response quality)
• Payment transaction records (processed by our payment provider — we do not store card details)

We use your data to:

• Provide and manage your subscription
• Send account notifications and invoices
• Improve the platform based on usage patterns
• Respond to support requests
• Comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising purposes.

We share your data only with:

• Our payment processor (for billing purposes only)
• Our hosting provider Railway (infrastructure only)
• Legal authorities if required by Moroccan law

We never share your data with hotel operators, real estate firms, or any commercial third party.

We retain your personal data for as long as your account is active. Upon account cancellation or deletion we delete your personal data immediately from our systems. Anonymised, aggregated usage statistics may be retained indefinitely.

We implement appropriate technical and organisational measures to protect your data including:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption for all data in transit
• Secure session management
• Access controls limiting data access to authorised personnel only

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent at any time

To exercise any of these rights contact legal@kodohospitality.com

If you are located in the European Union or European Economic Area, we process your personal data in accordance with the General Data Protection Regulation (GDPR). The legal basis for processing your data is:

• Contract performance: to provide the service you subscribed to
• Legitimate interest: to improve the platform and prevent fraud

EU/EEA users have additional rights under GDPR including the right to lodge a complaint with your local data protection authority. Contact legal@kodohospitality.com for any GDPR-related requests.

The Kōdō platform uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

This Privacy Policy complies with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.

We may update this Privacy Policy from time to time. We will notify you by email of material changes. The date at the top of this page indicates when it was last updated.

For any privacy-related questions or data requests contact:
legal@kodohospitality.com
Kōdō Hospitality, Casablanca, Morocco