Osoul Privacy Policy
How Osoul handles personal data, GDPR rights, tenant data isolation, and guest consent for advertising optimization.
Last updated: October 25, 2026
1. Information We Collect
We collect information you provide directly to Osoul, such as when you create an account, configure your hospitality profile, or contact our support team. This data typically includes your name, email address, phone number, and essential business details.
2. How We Use Your Information
Osoul utilizes the collected data to securely operate, maintain, and enhance our software services. This includes communicating with you, processing secure transactions, providing dedicated customer support, and personalizing your hospitality management experience with relevant platform updates.
3. General Data Protection Regulation (GDPR)
Where the General Data Protection Regulation (EU) 2016/679 applies, personal data must be processed lawfully, fairly, transparently, and only for specified purposes. Processing must have an appropriate legal basis, such as a contract, a legal obligation, legitimate interests assessed against individual rights, or consent. The hospitality business generally acts as controller for its guest data, deciding why and how it is used; Osoul acts as processor when handling that data on its instructions. Osoul acts as controller for its own account administration and business communications. These responsibilities depend on the actual processing activity and the applicable agreement.
4. Tenant Data Isolation
Osoul separates each tenant’s operational data into a dedicated tenant database. Data access is resolved within the active tenant context, keeping a tenant’s guest records, reservations, orders, and other operational records separate from those of other tenants. A tenant account does not grant access to another tenant’s operational data. This database separation protects the boundary between businesses; it does not replace access permissions within a business or the safeguards required for authorized support and service providers.
5. Guest Consent for Advertising Optimization
Using guest personal data for advertising measurement, audience matching, retargeting, or campaign optimization requires a separate, informed, affirmative opt-in. Before requesting consent, the business must explain the data involved, each advertising purpose, and the advertising partners that will receive it. Consent must not be inferred from a reservation, purchase, account creation, or acceptance of general terms. Guests must be able to refuse without losing access to the core hospitality service and withdraw as easily as they consented. Withdrawal stops future processing based on that consent; it does not affect the lawfulness of earlier processing. The business must retain evidence of consent and communicate withdrawals to relevant advertising partners. Shared data must be limited to what the consented purpose needs. Contact the business you visited, or contact@osoul.io for help with an Osoul-related request.
6. Data Sharing and Disclosure
Osoul firmly respects your privacy and does not sell your personal information. We may share necessary data with trusted third-party service providers who assist us in delivering our platform features, all strictly bound by comprehensive confidentiality obligations.
7. Data Security Measures
We implement industry-standard security protocols to safeguard your personal and business data against unauthorized access, alteration, disclosure, or destruction. While Osoul strives for maximum protection, please note that no internet transmission is entirely foolproof.
8. Your Privacy Rights
Where the GDPR applies, you may request access, correction, erasure, restriction of processing, and data portability, subject to the conditions and exceptions in the law. You may object to processing, including direct marketing, withdraw consent, and lodge a complaint with a competent data protection supervisory authority. For guest records, contact the hospitality business responsible for your data; Osoul can assist it with requests concerning data processed on its behalf. For data Osoul controls, or help identifying the responsible business, contact contact@osoul.io. We may need to verify your identity before handling a request.
9. Changes to this Privacy Policy
Osoul may periodically update this Privacy Policy to reflect evolving legal or operational requirements. We will actively notify you of any material changes through our website announcements or direct communication channels.