Skip to content

Privacy Policy

Date of revision: 12 October 2026. This policy explains what data we collect, why, and how we handle it when you use the ziyarago.com website and the ZiyaraGo apps.

1. Data controller

ZiyaraGo Technologies, Makkah, Kingdom of Saudi Arabia, commercial registration (CR) 7053928433, limited liability company. Contact for data matters: [email protected]. We process data in accordance with the legislation of the Kingdom of Saudi Arabia on personal data protection and, where applicable, with the laws of the user's country.

2. What data we collect

  • Account: name, email address and profile photo, if you sign in with Google or Apple.
  • Accommodation requests: name, contact details, dates and parameters of the trip, preferences. We do not request passport or payment data.
  • Enquiries: the content of emails and of messages in the chat with the AI assistant.
  • Technical data: IP address, type of device and browser, language, date and time of requests, pages you opened.
  • Geolocation: only if you have allowed it in the browser or app; it is used on your device to show nearby places and travel time, and is not stored on our servers.
  • Cookies and similar technologies: see the cookies page.

3. Why we use data

To provide the Service and to sign in to an account; to process requests and pass them to the service provider you have chosen; to respond to enquiries; to improve the Service and measure its performance; to ensure security and prevent abuse; to comply with legal requirements.

4. Legal grounds for processing

Your consent, performance of the service you requested, our legitimate interest in the security and development of the Service, and legal requirements. Consent can be withdrawn at any time; this does not affect the lawfulness of processing before withdrawal.

5. With whom we share data

  • The service provider you have chosen (a hotel or an aggregator), when you submit a request.
  • Contractors who ensure the operation of the Service: hosting, analytics, sign-in with Google and Apple, push notifications, AI services. They process data on our instructions and are obliged to protect it.
  • Government bodies, when required by law.

We do not sell your data.

6. Transfer of data abroad

Servers and contractors may be located outside your country. By using the Service, you understand that data may be processed in other countries; we take reasonable measures to protect it.

7. Retention periods

Data is kept for as long as necessary for the purposes of processing or as required by law, and is then deleted or anonymised. Account data is deleted after the account is deleted, except for information that we are required to retain.

8. Your rights

You have the right to request access to your data, its correction and deletion, to restrict processing, to object to it and to withdraw consent. Write to [email protected]: we will respond within a reasonable time. You can delete your account on the account deletion page.

9. Security

We apply technical and organisational protection measures: connection encryption, access restriction, logging. No method of data transmission is one hundred percent secure.

10. Children

The Service is not intended for children. If you believe that a child has provided us with data without parental consent, write to us and we will delete it.

11. Users from other countries

The Service operates from the Kingdom of Saudi Arabia. If your country has special requirements regarding data or the content of materials, you are solely responsible for complying with the laws of the country from which you use the Service.

12. Changes

We may update this policy. The current version is always published on this page.

13. Contacts

ZiyaraGo Technologies, Makkah, Kingdom of Saudi Arabia, commercial registration (CR) 7053928433. Email: [email protected].