Privacy Policy

Josti aims to provide everyone with the opportunity to rent housing on a long-term basis. We strive to simplify the process of long-term housing rental across the globe. The Company GMN GROUP values the trust of its clients. To earn and maintain this trust, we clearly explain, how we use personal information and how we protect your right to privacy.

This Privacy Policy describes, how LLC GMN GROUP its affiliated entities ( «we» , «us» or «GMN GROUP» «Josti»  ) process personal information in connection with your use of the Josti Platform. Depending on where you live and what you do on the Josti Platform, additional privacy provisions listed below may apply to you.

1. DEFINITIONS

If a term is not defined in this Privacy Policy, it shall have the meaning assigned to it in the Terms of Service. Josti ( «Terms of Service Josti» ).

2. PERSONAL INFORMATION WE COLLECT

2.1. Information Required for the Use of the Josti Platform.

We collect personal information about you when you use the Josti Platform. Without this information, it may not be possible to provide certain services. This information includes:

• Contact information, account information, and profile details . For example, your first name, last name, phone number, postal address, email address, date of birth, and profile photo. The specific information collected depends on the features you use.
• Identity verification information and payment information For example, an image of a government-issued identification document (as required by applicable law), an identification number, or other information necessary for identity verificationbank account or payment account information. If you are not a Josti user, we may receive payment-related information — for example, when a Josti user provides your payment card details to complete a booking. If we are provided with a copy of your identification document, we may scan, use, and store the information contained in that document for the purpose of verifying your identity.

2.2. Information You Provide to Us Voluntarily

You may choose to provide us with additional personal information. Such information may include:

• Additional profile information For example, your gender, preferred language(s), city, and personal description. Depending on your account settings, certain information may be displayed on your public profile page.
• Information about other individuals For example, a payment method belonging to another person, or information about accompanying individuals. By providing us with personal information about other individuals, you confirm that you have the authority to disclose such information to Josti for the purposes described in this Privacy Policy, and that you have informed those individuals about the Josti Privacy Policy, which they have read, understood, and agreed applies to them.
• Contacts from your address book . Imported or manually entered contacts from your address book.
• Other information For example, when you complete forms, add information to your account, participate in surveys, post messages on community forums, take part in promotions, communicate with our customer support team or other Users, or share your feedback with us. This category may also include medical information, if you choose to share it with us.

2.3. Information Automatically Collected When Using the Josti Platform and Our Payment Services.

When you use the Josti Platform and Payment Services, we automatically collect personal information. This information may include:

• Location information For example, precise or approximate location data determined based on your IP address or the GPS of your mobile device, depending on your device settings. We may also collect this information when you are not actively using the application, if you have granted the appropriate permission in your device settings.
• Usage statistics. For example, pages or content viewed, searches for Listings, completed bookings, and other actions taken on the Josti Platform.
• Log data and device information For example, details regarding your use of the Josti Platform (including interactions with links to third-party applications), IP addresses, dates and times of access, software and hardware information, device information, device event data, unique identifiers, crash data, cookie data, as well as pages you have viewed or interacted with before or after using the Josti Platform. We may collect this information even if you do not have a Josti account or are not logged in.
• Payment transaction information For example, the payment method used, date and time, payment amount, expiration date of the payment method, postal code, email address associated with PayPal, IBAN information, your billing address, and other details related to the payment transaction.

2.4. Personal Information We Receive from Third Parties

We collect personal information from other sources, including:

• Third-party services If you link the Josti Platform to a third-party service (such as Google, Facebook, or WeChat) or access your account through such a third-party service, you authorize that service to send us information related to your registration, friend list, and profile, in accordance with your privacy settings on that service.
• Invitations to Use Corporate Products and Account Management Organizations that use our Corporate Products may provide personal information to facilitate account management and to send invitations to use corporate products.
• Referrals and individuals traveling with you If you are invited to the Josti Platform — for example, as a second traveler on a trip — the person who invited you may provide us with personal information about you, such as your email address or other contact details.
• Other sources To the extent permitted by law, we may obtain additional information about you from third-party service providers and/or partners, including References , demographic data and information that helps detect fraudulent activity and ensure security, as well as combine the information received with existing information about you. For example, as part of our risk assessment and fraud prevention measures, we may receive creditworthiness results or fraud alerts from identity verification services. We may also receive information from our partners about you and your activities on and off the Josti Platform, or about your interactions with various services. We may receive medical information, including medical information related to infectious diseases.

3. HOW WE USE THE INFORMATION WE COLLECT

3.1. Providing, Improving, and Developing the Josti Platform We use personal information, for example, to:

• provide you with access to the Josti Platform, and to process and receive payments;
• enable you to communicate with other Users;
• process your requests;
• perform analytics, system diagnostics, and conduct research;
• provide customer support and training;
• send you technical notifications, support messages, updates, security alerts, and account-related communications;
• If you provide us with information about your contacts — for example, your friends or individuals with whom you intend to rent housing — we may process such information in order to: (i) facilitate referral invitations; (ii) share information about your housing search; (iii) detect and prevent instances of fraud; and (iv) facilitate the processing of your requests or for any other purposes approved by you.
• personalize and customize the user interface based on your interactions with the Josti Platform, search and booking history, profile information and preferences, as well as other content you provide;
• enable you to use our Corporate Products.

3.2. Ensuring Safety and Mutual Trust We use personal information, including to:

• detect and prevent fraud, spam, abuse, security incidents, and other harmful or malicious activities;
• conduct security investigations and risk assessments;
• verify or authenticate the information you provide;
• conduct checks by comparing information against databases and other information sources, including background or police records;
• comply with our legal obligations and protect the health and well-being of our Clients, Hosts, Host employees, and members of the public;
• resolve disputes with our Users, including sharing information with your co-Host or additional Clients;  related to disputes arising from your role as a co-Host or additional Client;
• ensure compliance with our agreements with third parties;
• comply with laws, respond to legal requests, prevent harm, and protect our rights (see Section 4.5);
• ensure compliance the Josti Terms of Use .
• In connection with the actions described above, we are entitled to perform profiling analyses based on your interactions with the Josti Platform, your profile information, and other content you submit to Josti, as well as on information received from third parties. In certain cases, if any activity poses a risk or threat to Josti, our community, or third parties, access to the platform may be automatically restricted or terminated based on the analysis of your account, your actions on the Josti Platform, and information about activities on and off the Josti Platform that may be associated with you. If you disagree with any automatically made decisions, please contact us using the details provided in the “Contact Us” section below.

3.3. Ensuring the Functionality, Personalization, Analysis, and Improvement of Our Advertising and Marketing Campaigns We use your personal information, for example, to:

• send you promotional messages, marketing communications, and other information based on your preferences, as well as display advertisements on social media platforms;
• personalize, evaluate, and improve advertising;
• manage referral programs and rewards, conduct surveys, sweepstakes, contests, and other promotional activities or events sponsored or organized by Josti or Josti’s partners;
• analyze parameters and preferences to send you promotional messages, marketing, advertising, and other information that we believe may be of interest to you;
• invite you to events and inform you about other opportunities.

3.4. Providing Payment Services Personal information is used to enable third parties to use the Payment Services, including to:

• detect and prevent money laundering, fraud, unlawful, and security-compromising activities;
• conduct security investigations and risk assessments;
• comply with legal requirements (including anti–money laundering regulations);
• to perform payment processing terms and other payment rules;
• with your consent — send you promotional messages, marketing materials, and other information that may be of interest to you, based on your preferences;
• provide and improve the Payment Services.

4. DISCLOSURE AND SHARING OF INFORMATION

4.1. Sharing with Your Consent or at Your Direction

If you provide your consent, we share your information as described at the time of obtaining such consent — for example, when granting a third-party application or website access to your Josti account, or when participating in promotional activities organized by Josti’s partners or third parties.

In accordance with applicable law, we may use certain information about you — for example, your email address — in a de-identified form and share it with social media platforms in order to create audiences of potential customers, drive traffic to Josti, or otherwise promote our products and services.

4.2. Sharing Between Users

To facilitate the booking process or interactions between Users, we may share certain information, such as:

• When submitting a booking request involving a co-Host or initiating a dispute, Clients and Hosts may exchange information such as profiles, names, names of additional Clients, booking cancellation history, review details, the Client’s age (where not prohibited by law), dispute resolution outcomes, and other information you choose to provide. Once a booking is confirmed, additional information may be shared to facilitate trip arrangements, including profile photos and phone numbers. If you are a Host and confirm a booking, certain information — including your profile, name, phone number, and the address of the Accommodation — will be shared with the Client (and any additional Clients invited by them, where applicable) to facilitate the trip.
• If you are a Host and invite another User to become a co-Host, you grant that person the right to view and update your information and User Content, including your name, phone number, Accommodation address, calendar, Listing details, Listing photos, and email address.
• If you are a Client and invite additional Clients, each of them will be able to see your name, trip dates, the Host’s name, Listing information, Accommodation address, and other relevant details.

4.3. Information You Post in Profiles and Listings, and Other Public Information

You may choose to make certain information publicly available. Examples include:

• a public profile page containing your profile photo, name (and initials, where applicable), description, and city;
• Listing pages that include information such as the approximate or exact location of the Accommodation or Experience, available dates in the calendar, profile photo, aggregate demand details (for example, the number of page views over a certain period of time), and other information you choose to share;
• reviews, ratings, and other feedback;
• content on community or discussion forums, blogs, or social media platforms.

On third-party websites, platforms, and applications, we may display portions of your public profile and other publicly available Content, such as Listing information.

Information you post on the Josti Platform may be indexed by third-party search engines. In some cases, you may be able to disable indexing through your account settings.

4.4. Service Providers for Hosts

Hosts may engage third parties to assist with managing or providing services, such as cleaning professionals or smart lock maintenance providers. Hosts may use features of the Josti Platform to share Client information with such third-party service providers (for example, arrival and departure dates, the Client’s name, and phone number).

4.5. Compliance with Law, Responding to Legal Requests, Preventing Harm, and Protecting Our Rights

We may disclose your information to courts, law enforcement agencies, government or tax authorities, and authorized third parties, where required or permitted by law, as well as in cases where such disclosure is necessary to: (i) comply with legal obligations; (ii) respond to a legally valid request (such as a subpoena or court order) or legal claims against Josti; (iii) respond to a legally valid request related to a criminal investigation concerning alleged or suspected unlawful activity, or to respond to any other actions that may result in legal or regulatory liability for us, you, or any of our users; and (iv) ensure compliance with and enforcement of ouragreements with Users, including the Josti Terms of Use ; (v) to protect the rights, property, or personal safety of Josti, Josti employees, Users, or members of the public. For example, a Host’s tax information may be disclosed to tax authorities or other governmental agencies, where permitted under the circumstances described above.

Where appropriate, we may notify Users about legal requests, except in cases where: (i) providing such notice is prohibited under applicable procedural rules, court orders, or relevant laws; or (ii) we believe that providing notice would be inappropriate, ineffective, create a risk of harm or bodily injury to an individual or group of individuals, create or increase the risk of harm or fraud against Josti or our Users, or expose Josti to a claim of obstruction of justice.

Where required or permitted by applicable law, we may disclose Hosts’ information to tax authorities.  and/or Clients, for the purpose of ensuring proper compliance with applicable tax obligations. The term “applicable tax obligations” refers to Josti’s tax responsibilities related to service fees, the collection and remittance of lodging or occupancy taxes, and withholding taxes, as well as individual tax obligations of Hosts. Information that may be disclosed includes the names of Hosts and Clients, Accommodation addresses, Hosts’ addresses, taxpayer identification numbers, dates of birth and/or contact details, property parcel identification numbers, payment information, transaction dates and amounts, the number of booked nights and Clients per booking, and the net booking value and payout amounts, as well as taxes collected by Josti on behalf of Clients and Hosts, where such information is available to Josti.

In jurisdictions where Josti provides Hosts with  In jurisdictions where Josti assists Hosts in obtaining or maintaining registrations, notifications, permits, or licenses with government authorities, or where such documentation is required, we may disclose Host information to the relevant governmental bodies both at the time of registration, notification, permit, or license issuance (for example, when a Listing is published) and periodically thereafter. Such disclosures may include the Host’s full name, contact information, Accommodation address, taxpayer identification number, registration, permit, or license number, Listing information, booking data, and the number of booked nights, in accordance with applicable law.

4.6. Programs with Property Managers and Owners

We may share personal information of Hosts and Clients — for example, booking details and information related to compliance with applicable laws — with homeowners, property management companies, and/or property owners ( «Building Management» ) for the purpose of facilitating the implementation of relevant programs. For example, booking information and Clients’ personal data — including their contact details — may be shared with the management of the building, complex, or neighborhood where the Host resides and/or where the Listing is located, in order to facilitate guest check-in, ensure compliance with applicable laws, maintain security, issue invoices, and provide other related services.

4.7. Service Providers

We share personal information with affiliated and unaffiliated service providers as part of our operations and to comply with regulatory requirements. This includes service providers that assist us in: (i) verifying your identity or the authenticity of your identification documents; (ii) checking information against public databases; (iii) reviewing information against law enforcement databases for criminal records or offenses, preventing fraud, and assessing risks; (iv) developing, maintaining, and improving our products; (v) providing Josti Services through third-party platforms and software tools (for example, via integrations with our APIs); (vi) delivering customer support, advertising, and payment services; and (vii) processing, handling, and evaluating insurance claims or similar requests. Third-party service providers are contractually required to protect your personal information and may only access it for the purposes described above.

4.8. Business Transfers

If Josti takes part in a merger, acquisition, reorganization, sale of assets, or bankruptcy, we may, in connection with such transactions or for the purpose of evaluating them (for example, during due diligence), sell, transfer, or assign some or all of our assets, including your information. In such cases, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.

5. OTHER IMPORTANT INFORMATION

5.1. Analysis of Your Communications

We may review, examine, or analyze your messages on the Josti Platform for the purposes described in the section “How We Use Collected Information”, including for the prevention of fraud, risk assessment, compliance with regulatory requirements, investigations, product improvement, research, analytics, and to ensure compliance withthe Josti Terms and customer support. For example, to prevent fraud, we may scan and analyze messages. In some cases, we may also scan, review, or analyze messages to adjust, improve, and expand the range of products and services we offer. Where feasible, we use automated tools. Occasionally, to evaluate and improve the functionality of these automated tools, we may need to manually review certain communications — for example, in the course of investigating fraudulent activity or providing customer support. We do not review, scan, or analyze your communications for the purpose of sending third-party marketing messages, nor do we sell such information or the results of message analysis.

5.2. Linking Third-Party Accounts

You may link your Josti Account to third-party service accounts, such as social media platforms. Your contacts on these third-party services are hereinafter referred to as “Friends.” When you enable data sharing by linking your account:

• some of the information provided to us as a result of linking accounts may be published on your public profile;
• your activity on the Josti Platform may become visible to your Friends on the Josti Platform and/or on the third-party service;
• a link to your public profile on a third-party social network may be added to your Josti public profile;
• other Josti users may be able to view a list of your mutual Friends or see an indication that you are a Friend of their Friend (where applicable);
• if, according to information from your social media profile, other Josti users attended the same educational institution, were born in the same city, or are members of the same groups as you, they will be able to see this information;
• information you provide to us as a result of linking accounts may be stored, processed, and shared for the purposes of fraud prevention and risk assessment;
• the publication and display of information you provide to the Josti Platform through account linking are carried out in accordance with your settings and permissions on both the Josti Platform and the third-party service.

5.3. Third-Party Partners and Integrations

The Josti Platform may contain links to third-party services that are not owned or controlled by Josti, such as Google Maps and Google Earth. he use of these services is governed by the privacy policies of their respective providers, such as the Google Maps and Google Earth Additional Terms of Service and . , Політикою конфіденційності Google .Ці треті особи не належать Josti та не контролюються Josti. При взаємодії з ними ви надаєте їм інформацію.

6. YOUR RIGHTS

You may exercise any of the rights described in this section in accordance with applicable law. Information about data subject rights and the procedure for submitting requests can be found here . We may ask you to verify your identity and request before we begin processing it.

6.1. Managing Your Information.

You can access and modify your personal information through your Account settings. If you have linked your Josti Account to a third-party service, such as Facebook or Google, you can change your settings and unlink the account from that service in your Account settings. You are responsible for keeping your personal information accurate and up to date.

6.2. Access to and Portability of Information

In certain jurisdictions, and as permitted by law, you may request copies of your personal information or details about how we process your personal information. You may also request copies of the personal information you have provided to us in a standard, structured, and machine-readable format and/or request that this information be transferred to another service provider (where technically feasible).

6.3. Data Deletion

In certain jurisdictions, you may submit a request to delete your personal information. Please note that if you request the deletion of your personal information, or if your account is terminated, cancelled, or voluntarily closed, the following rules apply:

• We may retain your personal information as necessary to pursue our legitimate business interests, including for the purposes of anti–money laundering, fraud prevention, and enhancing security. For example, if a Josti Account is suspended or blocked due to fraudulent activity or security concerns, we may retain information from that Account to prevent the User from re-registering on the Josti Platform in the future.
• We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, Josti  may retain information to comply with tax, financial reporting, and auditing requirements.
• Information that you have shared (for example, Reviews or forum posts) will remain publicly available on the Josti Platform even after your Josti Account has been deleted. However, any details identifying you as the author of this information will be removed. Certain copies of your information (for example, log records) may remain in our database without any personal identifiers.
• Due to the need to take measures to protect against accidental or intentional data corruption or loss, backups of your personal information will be deleted after a certain delay.

7. SECURITY SYSTEM

While complete security cannot be guaranteed, we continually implement and improve administrative, technical, and physical measures to protect your personal information against unauthorized access, loss, destruction, or alteration.

8. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time in accordance with applicable law. When we make changes, we will post the revised Privacy Policy and indicate the date of the last update at the top of the document. If the changes are material, we will also notify you of such changes by email at least thirty (30) days before they take effect. If you do not agree with the updated Privacy Policy, you may delete your Account. By failing to delete your Account before the effective date of the changes and continuing to use the Josti Platform, you acknowledge and accept the updated Privacy Policy.

9. CONTACT INFORMATION AND JOSTI DATA CONTROLLERS

For any questions or complaints regarding this Privacy Policy or Josti’s processing of personal data, please use the contact information provided on the Josti website (link to website).

Last Updated: September 1, 2025