Privacy Notice

1. Who we are

Guestbo is operated by Carlos Ronelli Freitas de Paula ("we", "us", "our"), acting as the data controller for personal data processed through the Guestbo application and website. If you have any questions about this notice, contact us through the in-app support page.

2. Personal data we collect

• Account data: name, email address, hashed password or OAuth identifier.
• Property data you enter: property details, transactions, bookings, notes, iCal feed URLs.
• Support data: messages you submit to support and any attachments.
• Usage & device data: IP address, browser, device identifiers, log data, and basic telemetry needed to operate the service.
• Cookies: essential cookies for authentication and session management.

Payment card and billing information is collected and processed by Paddle (see section 5); we do not store card numbers.

3. Why we use your data and legal bases

• To create and maintain your account and provide the service — performance of a contract.
• To secure the service and prevent fraud/abuse — legitimate interests.
• To respond to support requests — performance of a contract / legitimate interests.
• To comply with legal obligations (tax, accounting, lawful requests) — legal obligation.
• To improve the product — legitimate interests.
• Marketing communications, if any — consent, which you can withdraw at any time.

4. How we share your data

We share personal data only with the following categories of recipients:

• Hosting and infrastructure providers that store and serve the application.
• Paddle.com Market Limited, our Merchant of Record, for sale of subscriptions, subscription management, payments, tax compliance, invoicing, and refunds.
• Professional advisers (legal, accounting) where reasonably necessary.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. Payments and Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders. Paddle handles payment processing, tax collection and remittance, invoicing, subscription billing, refunds and related customer service inquiries. Paddle's privacy notice applies to the payment data they collect and is available at paddle.com/legal/privacy.

6. International transfers

Your data may be processed in countries outside your own, including within the UK, EEA and United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Retention

We retain your account and property data for as long as your account is active. If you delete your account, we delete or anonymise personal data within a reasonable period, unless we are required to keep it to meet legal, tax or accounting obligations.

8. Your rights

Subject to local law, you have the right to access, rectify, erase, restrict or object to processing of your personal data, request portability, and withdraw consent at any time. If you are in the UK or EEA, you also have the right to lodge a complaint with your supervisory authority. We will respond to requests within one month. Contact us through the in-app support page to exercise these rights.

9. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and hardened authentication, to protect your personal data. No system is perfectly secure, but we work continuously to reduce risk.

10. Cookies

We use essential cookies to keep you signed in and to operate core functionality. We do not use advertising cookies. If we add analytics cookies in the future, we will update this notice and provide controls where required.

11. Changes to this notice

We may update this notice from time to time. Material changes will be communicated in-app or by email.