1. General Provisions

This Privacy Policy regulates the collection, storage, processing, and transfer of personal data on the INN.AZ platform in accordance with the legislation of the Republic of Azerbaijan.

Use of the Platform constitutes full and unconditional acceptance of this Policy.

2. Personal Data Collected

During registration:

• first and last name;

• phone number;

• email address;

• encrypted password.

During booking:

• stay dates;

• guest details;

• passport details (if required);

• payment information.

Technical data:

• IP address;

• cookies;

• device and browser information;

• platform activity history.

Accommodation Provider data:

• property name and address;

• legal documentation;

• bank details.

3. Purpose of Processing

Personal data is processed for the following purposes:

• user registration and identification;

• booking execution;

• payment and refund processing;

• communication with users;

• security and fraud prevention;

• fulfillment of legal obligations.

4. Data Transfer

Personal data may be transferred only to:

• accommodation providers;

• payment service providers;

• government authorities (upon lawful request).

INN.AZ does not sell personal data for commercial purposes.

5. Data Retention Period

Personal data is stored:

• for the duration of an active account;

• or for up to 3 years after the last activity, unless otherwise required by law.

6. User Rights

Users have the right to access, correct, delete, and restrict the processing of their personal data.

7. Cookies

Cookies are used to ensure platform functionality and for analytical purposes.

8. Security Measures

INN.AZ applies appropriate technical and organizational security measures.

9. Amendments

This Policy enters into force upon publication.

User bank card details are not stored, processed, or retained by INN.AZ. All payment transactions are carried out exclusively through certified payment service providers.

Use of INN.AZ constitutes acceptance of this Privacy Policy.