This notice explains how Royal Stay handles personal information on royalstayhotels.com and in the Royal Stay Android app (com.royalstay.app). Royal Stay is operated by Hubaal Global Nexus in Jigjiga, Ethiopia. For privacy questions, use our contact support page or email hello@royalstay.africa.
Information we handle
- Accounts: name, email, phone, language and account access information. Google sign-in may provide your name, email and profile picture; it does not provide your Google password.
- Reservations: hotel, room, dates, guest details, requests and booking references.
- Hotel operations: business and verification documents, payout details, staff records and information entered by authorised hotel users.
- Messages and content: support and deletion requests, uploaded photos and reviews. If you use the AI concierge, your messages and relevant hotel information are sent to an AI service to generate a reply. Do not include passwords, payment secrets or unnecessary personal information.
- Technical information: session and language preferences, browser and device information, request and security logs.
- Payments: transaction reference, amount, currency and payment status from Chapa. Royal Stay does not store full card numbers, CVVs or mobile-money PINs.
Why we use information
We use information to manage accounts and booking requests, provide hotel services, handle support, verification, invoices and payment records, protect access and investigate errors or abuse. Successful bookings carry a 5% hotel-funded platform commission; the hotel's net balance is 95%. Submitting a booking request or returning from checkout does not by itself establish a confirmed payment.
Who receives information
- The hotel you book receives the guest and reservation information needed to handle your stay. Hotels also have responsibilities for the information they use.
- Lovable Cloud provides hosting, account access, database and file storage services.
- Chapa processes online payments. Telebirr, CBE Birr or card methods may be offered inside Chapa checkout when enabled for the merchant; they are not separate Royal Stay online providers.
- Service providers may handle email delivery and, when you use it, AI concierge processing. Google receives sign-in requests when you choose Google sign-in.
- Information may be disclosed where legally required or necessary to investigate abuse and protect users.
We do not sell personal information. For details about a provider or a particular disclosure, contact support.
Storage, retention and security
Royal Stay uses access controls and managed cloud services. No service can guarantee absolute security. Hosting and provider processing locations may be outside Ethiopia; contact us for location and transfer information. We do not claim that all information is stored in Ethiopia.
Retention depends on the information, service needs and applicable legal, accounting or dispute obligations. A fixed retention schedule is under review; this notice does not promise a blanket five- or seven-year period. Information retained in backups may remain until the relevant backup expires.
Your choices and privacy requests
Contact support to request access, a copy, correction or deletion of your personal information, or to raise an objection, withdraw consent or ask about other rights under applicable law. We may need proportionate verification of your identity and coordination with the relevant hotel. Never send your password, recovery codes or payment PIN.
You can submit an account deletion request. Submission records a request; it does not immediately erase your account. Legal retention requirements may limit deletion. Contact support for the status, applicable timing, retained records or to escalate a privacy concern. No blanket completion deadline is promised here.
Manage marketing choices through email preferences. Booking records remain available through My bookings. See our Terms of service, cancellation policy and refund policy for booking conditions.
Children and app permissions
Royal Stay accounts are intended for adults. Reservations may include accompanying children's details entered by an adult; provide only what the hotel needs. Contact support about information concerning a child. The Android app uses network access and may request notification permission.
Changes and contact
The date above identifies this notice's latest revision. Privacy concerns and questions can be sent through Help center / Contact support or to hello@royalstay.africa. Publication of this notice is not INSA certification or confirmation of legal compliance.