What we hold, and why.

If you create an account: your name and email address. Your password is set and held by Clerk, our sign-in provider — it never reaches our systems.

If you book an experience: your name, email address, phone number, the number of people in your party, and any notes you add for the host. You can book without an account, and if you do, we still hold these details because the host needs them to run your trip and to reach you if plans change.

If you list experiences as a host: your business name and description, your public page address, any social links you add, and your payout details — account holder name, bank, IBAN, CliQ alias, account number and, where given, SWIFT and branch codes. We may also ask for licensing and insurance documentation, as set out in the Provider Terms.

If you leave a review: your rating, your written review, and the display name shown against it. Reviews are public.

Photos you upload are stored on our image host and served publicly as part of your listing or profile.

• Your card details. Payment happens on Stripe’s own checkout page. Your card number never touches our servers and we cannot see it. We keep only Stripe’s reference for your payment, so we can issue a refund.
• Tracking or advertising cookies. We run no analytics product, no advertising pixels and no third-party trackers. The only cookies set are the ones Clerk needs to keep you signed in.
• Browsing tied to your identity. We count how many times each experience is viewed so hosts can see interest in their listings. That count records the listing and the time — it is not linked to you, your account or your IP address.

• To take your booking, confirm it, and give the host what they need to run it.
• To take payment and pay hosts, and to process refunds when you cancel.
• To send you booking confirmations, changes, cancellations and calendar files. These are service messages, not marketing.
• To verify that hosts are licensed and insured, and to investigate complaints about safety or service.
• To meet our tax, accounting and record-keeping obligations in Jordan.

We do not sell your personal data, and we do not send marketing email unless you have asked us to.

We use a small number of specialist providers. Each one only receives what it needs to do its job.

We also share your booking details with the host you booked with — that is the point of the booking. Hosts are bound by the Provider Terms to keep what they learn confidential and to use it only to deliver your experience.

We may disclose data where we are legally required to, or to establish or defend a legal claim.

Our database is hosted in Frankfurt, Germany (AWS eu-central-1). Several of the providers listed above operate from the United States or on global networks. This means personal data collected in Jordan is transferred to and stored outside Jordan.

We only use providers that offer contractual data-protection terms, and we rely on those terms as the basis for these transfers. If you would like to know more about the safeguards for a specific provider, write to us at the address below.

• Account details: for as long as your account is open, and then deleted on request.
• Bookings, payments and payout records: retained after your trip for as long as Jordanian tax and commercial law requires us to keep financial records, because they are proof of a transaction.
• Reviews: kept for as long as the listing is published, since removing them would misrepresent the host's record. You can ask us to detach your name from a review.
• Host licensing and insurance documents: for as long as the host is active on the platform.

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or out of date;
• delete your data, where we are not required to keep it;
• stop a particular use of your data, or withdraw consent you previously gave;
• explain a decision we have made about your account.

Write to info@joventure.ai and we will respond within 30 days. There is no charge. We may ask you to confirm your identity first, so that we do not hand your data to someone else.

Deletion has limits we would rather be straight about: we cannot delete the financial record of a completed booking while the law requires us to keep it, and we cannot remove a booking a host still needs in order to run your trip. Everything else goes.

Traffic is encrypted in transit. Passwords and card details are held by Clerk and Stripe respectively, not by us, which means the two most sensitive things about you are handled by specialists. Access to the database is restricted to the people who operate the platform.

No system is perfectly secure. If a breach affects your personal data and puts you at risk, we will tell you and the relevant Jordanian authority.

JoVenture is not intended for children. Do not create an account if you are under 18. If you book an experience for a child, you are giving us their place in the party, not their personal data — please do not send us more about them than the host needs.

If we change how we use your data in a way that affects you, we will update this page and tell account holders by email before the change takes effect.

Questions, requests or complaints: info@joventure.ai, or JoVenture, Amman, Hashemite Kingdom of Jordan.

If you are not satisfied with how we have handled your request, you may complain to the competent personal data protection authority in Jordan.