Privacy Policy

This policy explains what information Ospitus collects, why we collect it, and how hotels and their guests stay in control of it.

1. Who we are

Ospitus is a cloud-based hotel management platform (website, booking engine, PMS, POS, AI Front Desk) available at ospitus.com and at hotel sub-domains such as yourhotel.ospitus.com. In this policy, "we" means Ospitus and "hotel" means a business that uses Ospitus.

2. Information we collect

• Account information of hotel owners and staff: name, email, phone number, hotel name and billing details.
• Guest information that a hotel enters or receives through its Ospitus website: name, contact details, stay dates, citizenship and passport details when the hotel needs them for registration.
• Messages sent to the AI Front Desk chat on a hotel website.
• Technical data: IP address, browser type, pages visited and cookies needed to keep you signed in and remember your language and theme.

3. Hotels own their guest data

For guest information, the hotel decides what is collected and why; Ospitus processes it only on the hotel’s instructions to provide the service. Guests who want to access, correct or delete their data should contact the hotel directly; we will help the hotel respond.

4. How we use information

• To provide, secure and improve the Ospitus service.
• To create bookings, invoices and reports for the hotel.
• To send service messages such as booking confirmations, account and billing notices.
• To answer support requests.

We do not sell personal data and we do not use guest data for advertising.

5. Who we share it with

• Hosting and infrastructure providers that run the platform.
• Payment providers, when a hotel or guest makes a payment.
• The AI provider that powers the AI Front Desk, only for the text of chat messages.
• Government systems such as e-Mehmon, only when the hotel turns on this integration and registers a guest.
• Authorities, when required by the law of the Republic of Uzbekistan.

6. Storage and security

Data is transmitted over encrypted connections (HTTPS) and each hotel’s data is kept in its own separate database. Access by our team is limited to what is needed for support and maintenance.

7. How long we keep data

We keep hotel account data while the account is active. After an account is closed, data is deleted or anonymised within a reasonable period, unless the law requires us to keep it longer.

8. Your rights

In line with the Law of the Republic of Uzbekistan "On Personal Data", you may ask to access, correct or delete your personal data, or withdraw your consent. Write to hello@ospitus.com and we will reply within 30 days.

9. Cookies

We use essential cookies for sign-in, security, language and theme preferences, and basic analytics to understand how the site is used. You can block cookies in your browser, but some features may stop working.

10. Changes

We may update this policy. The date at the top shows the latest version; important changes will be announced on the site or by email.