2. What Data We Collect

From Hosts:

Name, email, and (if signing in with Google) Google profile picture.

From Guests:

The data collected from guests is determined by what each host requests during the online check-in or feedback process. This may include, but is not limited to:

• Full name
• Email address
• Residential address
• Country
• City
• Phone number
• Identity number
• Passport number
• Tax ID number

3. How We Use the Data

• To provide and maintain the GuestBit platform
• To support hosts in managing properties and guest interactions
• To offer support and respond to inquiries
• To analyze usage and improve our services

4. Legal Basis

We process personal data under the GDPR based on:

• Your consent (e.g., submitting a review)
• Contractual necessity (providing our services)
• Legitimate interest (improving the platform)

5. Third-Party Services

We use trusted third-party service providers that process personal data on our behalf:

• Supabase – backend infrastructure and database hosting
• Google Maps API – location and map features
• Stripe – payment processing and subscription management
• Resend – transactional and promotional email communication
• Zoho Mail – business email communication
• Vercel and Netlify – frontend hosting and deployment
• Umami Analytics – privacy-focused website analytics that helps us understand how visitors use our website. Umami does not use cookies and does not collect personal data.

6. Cookies

We use only strictly necessary cookies to ensure the proper functioning of the application (for example, language preferences).

For website analytics we use Umami Analytics, a privacy-focused analytics service that does not use cookies and does not track personal data.

7. Data Sharing

We do not sell or rent your personal data. Data may be shared with third-party services listed above or where legally required.

8. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy or as required by law.

9. Ad Servers

We do not partner with or have special relationships with any ad server companies.

10. Security

All data and information transmitted with our service is secured using SSL (Secure Socket Layer) protocol to ensure confidentiality and integrity.

11. Your Rights (EU Residents)

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Object to or restrict processing

12. Product Updates & Feature Announcements

As part of providing our services, we may contact hosts by email with product updates and feature announcements relevant to their GuestBit account.

These communications are sent under our legitimate interest in keeping users informed about platform improvements.

All such emails include a clear “Unsubscribe” link, allowing recipients to opt out of non-essential communications at any time.

13. Contact Us

If you have any questions or requests, contact us at info@guestbit.app.