Last updated and effective: 21 August 2026.
This Privacy Policy explains how OkupAI (the "Service") collects, uses, and shares information when you access or use our channel management software for short-term rental and hotel operators. By using the Service, you agree to this policy.
Where required by law, we process personal data under these legal bases: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service, communicate with you, and prevent fraud), legal obligations, and your consent (for certain analytics or marketing where applicable).
We may process and store information in countries outside your own. Where required, we implement appropriate safeguards for cross‑border transfers (such as standard contractual clauses) and ensure vendors provide adequate protections.
We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure; you are responsible for maintaining the confidentiality of your credentials.
We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and legal requirements.
Depending on your location, you may have rights to access, correct, delete, or port your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise these rights, contact us at office@okup.ai. You may also have the right to lodge a complaint with your local data protection authority. Controller: OKUPAI FZCO, Dubai Digital Park, Dubai Silicon Oasis, Building A1, Dubai.
We use cookies and similar technologies to operate the Service, remember preferences, and analyze usage. You can control cookies through your browser settings. Some features may not function properly without cookies.
The Service is not directed to children and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
If you open a referral link, enter a referral code, activate the OkupAI Referral Program, or participate in a referral, we process referral identifiers and event data such as the referral code, signed link/session data, capture and expiry timestamps, signup attribution, customer-account and user identifiers, Program-version acceptance, subscription cadence and status, eligible paid revenue excluding tax, discount and reward calculations, hold and payout status, payment reference, fraud and compliance review flags, and relevant audit records. We use this information to validate and preserve referral attribution; apply discounts; calculate, review, report, and pay rewards; prevent self-referral, duplicate attribution, abuse, and fraud; comply with tax, accounting, sanctions, and other legal duties; resolve disputes; and maintain Program security.
Referral-link data may persist in a signed browser or server session for up to 90 days. Signup attribution is kept immutable so that discounts, rewards, audits, and disputes can be administered consistently. Financial, payout, tax/KYC, fraud-prevention, and legal records are retained for the periods required by applicable law and OkupAI’s documented retention schedule. The Referrer’s customer dashboard may receive the Referred Customer’s privacy-safe customer-account or company display name, billing or referral status, and aggregate eligible spend and reward status needed to understand the referral. The Referred Customer may see the Referrer’s first name or, if unavailable, customer-account or company display name on the signup page. It does not receive an individual contact name, email address, telephone number, street address, invoice details, invoice or payment identifiers, bank details, payment-card data, or other payment credentials. Authorized OkupAI administrators and service providers may access the minimum information needed to operate payouts, compliance, support, hosting, security, and billing under appropriate contractual and access controls. Where required, we rely on performance of the referral terms, our legitimate interests in operating and securing the Program, and compliance with legal obligations. Applicable data-subject rights and contact details are described elsewhere in this Privacy Policy.
We may update this Privacy Policy from time to time. If changes are material, we will provide notice (for example, by email or in‑app). The updated policy will be effective on the stated date. Your continued use of the Service constitutes acceptance of the updated policy.