Privacy policy.

1. Who we are

Lebanon Rental ("Lebanon Rental", "we", "us", "our") is a vacation-rental marketplace operating in Lebanon. This policy covers our website at beta.lebanon-rental.com(and its current deployment domains), the guest experience, the owner dashboard, and our internal admin tools (together, the "Service"). Our registered contact address is Main Road, Amioûn, Liban-Nord, Lebanon. For any privacy question you can reach us at support@lebanon-rental.com. We are the data controller for the personal data described here.

2. What we collect

• Account data. Your email, display name, and optional username. If you sign in with Google, Apple, or Facebook we receive your name, email, and profile photo from that provider. If you verify a phone number we store it. Held in Firebase Authentication and Firestore (users/{uid}).
• Trip preferences & briefs.The answers you give in "Plan my trip" (dates, group size, budget, region, vibe, wishlist) and any notes. Stored as plan inquiries.
• Favourites & saved searches. Properties and searches you save — kept in your browser and mirrored to your account when signed in.
• Bookings & communications. Booking inquiries, dates, your WhatsApp/phone contact, and messages with our team or a host arranged through us.
• Listings (owners). Property details, photos, approximate and exact address, house rules, pricing, payout channels, and availability.
• Identity documents. To keep the marketplace safe we may ask guests and owners to upload a government ID for verification. These are stored in access-restricted storage, used only to verify identity, and retained no longer than needed for that purpose (see Retention).
• Reviews & content. Reviews, ratings, and any content you submit.
• Usage & device data. Pages viewed, load times, approximate country, and device/browser type, collected in an aggregated, cookieless way (see Cookies).

We do not collect or store payment-card numbers — payments are made by you directly to the host (see Terms of Service).

3. How we use it

• Operate the marketplace — show listings, save favourites, and personalise recommendations.
• Arrange your stay — line up matching places, pass your brief to our concierge team, and coordinate with hosts.
• Verify identity and prevent fraud, abuse, and unsafe listings.
• Send transactional messages (booking updates, listing approved, statements). We do not send marketing without your opt-in.
• Improve and secure the Service, and comply with legal obligations.

Our legal bases (where applicable) are: performance of a contract (arranging your stay), our legitimate interests (running and securing the Service), your consent (marketing, cookies), and compliance with the law.

4. Who we share it with

We share data only with service providers that process it on our behalf, under contract, for the purposes above:

• Google / Firebase — authentication, database, and file storage.
• Vercel — website hosting and privacy-friendly, cookieless analytics.
• Resend — delivery of transactional emails.
• OpenAI — powers AI trip-planning and "Ask the property." We send only the relevant query/listing snippet, not your account identifiers.
• Google Maps Platform — maps, geocoding, and place search.
• WhatsApp / Meta — when you choose to continue a brief or booking over WhatsApp, that conversation happens on Meta's platform under their terms.

We also share data with hosts as needed to arrange a confirmed stay, and where required by law or to protect rights and safety. We never sell your personal data and never share it with advertisers or data brokers.

5. International transfers

Some providers above process data on servers outside Lebanon (including the United States and the EU). Where we transfer data internationally we rely on appropriate safeguards, such as the providers' standard contractual clauses and security commitments.

6. Cookies & local storage

We keep the essentials only. We use localStorage to remember favourites, recently-viewed listings, and a draft of your trip plan, and sessionStorage for small UI preferences. Firebase sets a secure session token to keep you signed in. Our analytics (Vercel) are cookieless and don't fingerprint you. Where consent is required we ask for it via the cookie banner, and you can change your choice at any time.

7. Retention

We keep account data for as long as your account is active. Trip briefs and booking records are kept as long as needed to provide the Service and meet legal/accounting obligations. Identity documents are deleted once verification is complete or the verification need has passed. When you delete your account we remove or anonymise your personal data, except where we must retain limited records by law.

8. Your rights

Wherever you are, we offer you the core data-protection rights: access a copy of your data, correct it, delete it, export it (portability), object to or restrict certain processing, and withdraw consent at any time. To exercise any right, email support@lebanon-rental.com — we respond within 30 days. You also have the right to complain to your local data-protection authority.

9. Security

Data is encrypted in transit, access to systems is restricted, and identity documents live in storage that clients cannot read. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.

10. Children

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, email us and we will remove it.

11. Changes to this policy

If we change this policy we'll update the "Last updated" date above and, for material changes, post a notice on the site and email account holders.

12. Contact us

Questions about privacy or your data? Email support@lebanon-rental.com or call +961 81 062 329. Postal: Main Road, Amioûn, Liban-Nord, Lebanon.