Your privacy, our promise.

We collect three categories of data:

• You give us: name, email, phone, ID for verified pros, and listing details.
• You generate: bookings, messages, reviews, saved searches and favourites.
• We collect automatically: device info, IP, approximate location, and cookies for analytics & security.

• To match you with relevant homes, hotels and professionals.
• To process bookings, payments and disputes.
• To verify identities and prevent fraud.
• To send transactional emails and — only with consent — marketing.
• To improve DalVora AI's recommendations.

We share only what's necessary: payment processors (Stripe, Paystack), identity verification partners, hosts/pros you book, and law-enforcement when legally required. We never sell your data.

You can access, correct, export or delete your data anytime from your dashboard, or by emailing privacy@dalvora.com. EU/UK users have GDPR rights; Nigerian users have NDPR rights; South African users have POPIA rights.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Payment data is tokenised and never touches our servers. We run continuous security monitoring and annual third-party audits.

We keep account data while your account is active. After deletion, we retain transactional records for 7 years to meet financial regulations, then purge them.

Dalvora is not for users under 18. If we learn we've collected data from a minor, we'll delete it.

If we materially change this policy, we'll notify you by email and in-app at least 30 days before it takes effect.