Privacy Policy

Last updated: May 30, 2026

Diyafah is committed to protecting your privacy and that of your guests. This policy explains what data we collect, how we use it, and who we share it with.

1. Who we are

Diyafah is a managed digital concierge service operated by Diyafah SARL (Casablanca, Morocco). For questions about this policy, contact us at team@diyafah.ai.

2. What data we collect

As part of our concierge service, we may collect:

  • WhatsApp messages exchanged between guests and the AI agent
  • Guest name and phone number (provided via WhatsApp)
  • Stay preferences (dates, room type, special requests)
  • Booking data (check-in/check-out dates, rates)
  • Property information (name, city, descriptions, room types)

3. Why we collect this data

We process this data solely to provide the concierge service: answering guest questions, managing booking requests, and enabling properties to supervise conversations. No data is used for advertising or profiling purposes.

4. Where data is stored

All data is stored on Supabase, a secure cloud infrastructure with encryption at rest and in transit. Servers are located in the European Union. WhatsApp messages pass through Meta's official WhatsApp Business API, governed by Meta's privacy policy.

5. Who can access the data

Only two categories of people can access the data: (a) staff of the relevant property, via the Diyafah dashboard, and (b) Diyafah's technical team, for service maintenance and support. Data is never sold, rented, or shared with third parties for commercial purposes.

6. Data retention

Conversations and booking data are retained for the duration of the service, plus a reasonable period after contract termination to allow the property to retrieve its history. Properties may request deletion of their data at any time.

7. Your rights

In accordance with Moroccan Law 09-08 and the GDPR for EU residents, guests and properties have the right to:

  • Access their personal data
  • Request correction of inaccurate data
  • Request deletion of their data (right to be forgotten)
  • Object to the processing of their data
  • Request data portability

8. Contact

To exercise your rights or ask questions about this policy: team@diyafah.ai. We respond within 30 days.

Diyafah SARL · Casablanca, Morocco · team@diyafah.ai