← Back

Genix Hotel — Privacy Policy

Genix Hotel (the "Service") is provided by Genix Bilgisayar — Cansu Aydin, Inonu Mah. Sefa Sok. No:7/A, 35750 Odemis / Izmir, Türkiye ("Genix", "we"). This policy explains what personal data we collect when you use the Service, why we use it, who we share it with, how long we keep it and what rights you have.

1. Data we collect

Category	Examples
Account data	Name, e-mail address, phone number, hotel/business name
Subscription data	Plan, trial and renewal dates, payment status (we never see or store your full card number)
Content you enter	Reservations, rooms, rates, guests, payments, expenses, notes; optionally photographs of guest identity documents if you choose to upload them
Technical data	Session data, IP address, device and browser type, application logs (for security and troubleshooting)

The Service does not collect your location or contacts, and does not use tracking or advertising cookies. Only cookies strictly necessary for login and security are set.

2. Why we use it, and on what legal basis

• To provide the Service — create and manage your account, store and synchronise your data, authenticate you. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• Billing and subscriptions — process purchases, renewals and invoices. Contract; and legal obligation for accounting records (Art. 6(1)(b), (c)).
• Support, security and troubleshooting — respond to your requests, detect abuse, keep the Service reliable. Legitimate interests (Art. 6(1)(f)).
• Optional notifications — push notifications for reminders and check-ins. Consent, which you can withdraw at any time in your device settings (Art. 6(1)(a)).
• Legal compliance — meeting obligations to which we are subject. Legal obligation (Art. 6(1)(c)).

We do not sell or share your personal data for advertising, and we do not use it to train artificial-intelligence models.

3. Device permissions

• Notifications — to deliver reminders and check-in alerts (optional).
• Camera / photo library — only when you choose to attach a document or identity photograph.
• Internet access — to synchronise data with our servers.

4. Who we share it with

We share personal data only with service providers that help us run the Service, under contract and only for that purpose:

• Hosting — our own servers located in Türkiye.
• E-mail delivery — for account, password and notification e-mails.
• Push notification delivery — Apple Push Notification service (iOS) and the browser's web-push service.
• Payment providers and app stores — Apple and Google for in-app purchases, and our payment provider for web purchases. They receive the data needed to take payment; we never receive your full card number.
• Messaging providers — only if you enable WhatsApp messaging in the Service.
• Public authorities — where we are legally required to disclose data.

5. International transfers

Our servers are in Türkiye. Türkiye is not covered by a European Commission adequacy decision. Where personal data is transferred from the European Economic Area or the United Kingdom to us, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with technical measures such as encryption in transit. You may request a copy of the safeguards by writing to us.

6. How long we keep it

• Account and content data — for as long as your account is active.
• After deletion — when you delete your account, your data is removed from the live system. A copy may remain in encrypted backups for a limited period until those backups are rotated, after which it is deleted.
• Invoices and accounting records — kept for the retention period required by applicable tax law.
• Security logs — kept for a short period, then deleted.

7. Security

Data is transmitted over encrypted connections (HTTPS/TLS), passwords are stored only as salted hashes, and sensitive credentials you store in the Service are encrypted at rest. Access is limited to authorised personnel. No system can be guaranteed completely secure; if a breach affects your personal data we will notify you and the competent authority where the law requires it.

8. Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise these rights, e-mail info@genixsoft.com.tr. We respond within 30 days.

If you are in the EEA or the UK you may also lodge a complaint with your local data protection supervisory authority. If you are a California resident, you may request to know, delete or correct your personal information, and you will not be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined by the CCPA/CPRA.

You can delete your account yourself at any time from Settings → Danger Zone → Delete Account.

9. Children

The Service is intended for businesses. We do not knowingly collect personal data from children under 16 (under 13 in the United States). If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes

We may update this policy. The current version is always published on this page, and material changes will be announced in the application or by e-mail.

11. Contact