Effective May 15, 2026 · United States
Privacy Policy
This Policy describes how Rebookt ("we," "us") handles information when you use our websites and services. It is intended as operational documentation, not legal advice. Consult counsel for jurisdiction-specific obligations.
1. What we collect
- Account data: email and authentication identifiers from our auth provider.
- Host & property data: listings you configure (names, slugs, prices, images, availability blocks, reward settings).
- Guest & booking data: contact and stay details submitted on booking flows, payment metadata from Stripe, and message logs needed to run automation.
- Technical data: server logs, device and browser signals, and diagnostics to secure and improve the Service.
2. How we use information
We use data to provide and secure the Service, process payments, send transactional and product emails, operate automation you configure, comply with law, and improve reliability. We do not sell your personal information.
3. Legal bases (EEA/UK visitors)
Where GDPR-style rules apply, we rely on contract (providing the Service), legitimate interests (fraud prevention, security, product improvement balanced against your rights), and consent where required (e.g. certain cookies or marketing, if offered).
4. Sharing and processors
We use subprocessors such as Supabase (database/auth), Stripe (payments), Resend (email), and hosting on Vercel. They process data under agreements fit for their roles. We may disclose information if required by law or to protect rights and safety.
5. Retention
We retain information as long as needed to provide the Service and meet legal, tax, and accounting obligations. You may request deletion of host account data subject to exceptions (e.g. completed payment records we must retain briefly).
6. Your rights
Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. Contact hello@rebookt.com to exercise rights. You may lodge a complaint with your local supervisory authority.
8. Children
The Service is not directed at children under 13. We do not knowingly collect personal information from children.
9. International transfers
We may process data in the United States and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
10. Changes
We may update this Policy from time to time. Material changes will be posted on this page with an updated effective date.
11. Contact
Privacy inquiries: hello@rebookt.com