Privacy Policy

Bedexa ("we", "us") is the property-management service at bedexa.com and its companion iPhone app. This policy explains what we store, why, where it lives, who can see it, and the choices you have. It is written for two audiences: the team members who use Bedexa, and the guests whose stays are recorded in it.

What we store

Team members. Your name, email address, role and abilities, the times you were last active, the devices you have signed in from, and, if you sign in with Google or Apple, the stable identifier that provider gives us for your account. We do not receive your Google or Apple password. If you sign in with Apple and choose to hide your email, we receive the relay address Apple provides instead.

Guests and stays. What a property records to run and to comply: names, nationality, date of birth, passport or identity-card details, and images of those documents; stay dates, room, rates, taxes, charges and payments; and a persistent guest registration number that the Maldives green-tax return requires. The property you stayed with is the controller of this data; Bedexa processes it on the property's behalf.

Expenses. Supplier invoices your team photographs or uploads, and the details read from them: supplier name and tax identification number, invoice number, date and amounts.

Technical. Session cookies needed to keep you signed in, and standard server logs (IP address, time, request) kept briefly for security and troubleshooting. We do not use advertising or analytics trackers.

Why we use it

To run the property's front desk: bookings, check-in and check-out, folios and payments, housekeeping. To prepare the statutory returns a Maldivian tourist establishment files (the MIRA green-tax information sheet, the TGST return, the MMA monthly sales report and the input-tax statement) from those records. To keep accounts secure, to tell you about changes that affect you, and to answer your questions.

Sign in with Google and Apple

When you sign in with Google we ask only for your basic profile: name, email address and profile identifier. We use them solely to sign you into the Bedexa account that already carries that email address, or, for addresses on the property's own company domain, to create an owner account. We do not read your mail, contacts, calendar or files, and we do not use this information for anything else.

Bedexa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sign in with Apple works the same way, using the identifier and email Apple provides.

Where it lives and who processes it

Bedexa is hosted on Laravel Cloud, with the application and database in Singapore and uploaded files in object storage. Requests pass through Cloudflare's network, which protects the site.

When your team photographs a supplier invoice, the image is sent to OpenAI to be read into text. OpenAI processes it to return the result and, under its API terms, does not use it to train models. If your property connects the Beds24 channel manager, booking and guest details are exchanged with Beds24 as needed to keep the two in step.

We do not sell personal data, and we do not share it with anyone else except where the law requires.

Who can see it

Only members of your property's team, according to the role and abilities the owner has given them. Housekeeping sees rooms, not money; an accountant sees reports and expenses; the owner sees everything. Bedexa's operators can access data when needed to run or fix the Service, and do so only for that purpose.

How long we keep it

For as long as the property's account is open. Maldivian tax law requires accommodation providers to keep records for several years, so stay and payment records are retained accordingly even after a guest has left. When a property closes its account we export its data on request and then delete it, subject to those retention duties. Server logs are kept for a short, fixed period.

Your choices and rights

Team members can correct their own details and withdraw a device by signing it out. A guest who wants access to, correction of, or deletion of their data should contact the property they stayed with, which as controller will act on it with our help; if you write to us instead we will pass the request to the property. Anyone can ask us what we hold about them by writing to hickr@me.com.

Children

Bedexa is a business tool for adults working at a property. Guest records may include children travelling with adults, recorded by the property as the law requires.

Changes

If this policy changes we will update the date at the top of the page and tell property owners about material changes by email.

Contact

Privacy questions go to hickr@me.com.