Privacy Policy

Who we are

The controller is [OPERATOR LEGAL ENTITY — placeholder], [ADDRESS — placeholder], [CONTACT EMAIL — placeholder]. This policy explains what we process and why.

What we process

Account data (name, email, password hash), listing and booking data, messages, and payment/payout metadata. We process this to operate the marketplace, take bookings, handle payments and prevent abuse (Art. 6(1)(b) and (f) GDPR). Optional marketing email requires your separate consent (Art. 6(1)(a)).

Processors we use

We share data with the processors needed to run the service:

• Hosting & database — [HOSTING PROVIDER — placeholder], EU region.

• Object storage (photos) — Cloudflare R2.

• Transactional & lifecycle email — Resend.

• Payments (money in) — Stripe.

• Host payouts (money out, Indonesia) — Wise.

• Map tiles (search map, in-app) — CARTO basemaps.

Where a processor transfers data outside the EU/EEA, the transfer is covered by EU Standard Contractual Clauses and/or an adequacy/DPF basis.

Cookies

We set only essential cookies by default. Optional analytics cookies are set only with your consent via the cookie banner, and you can withdraw consent anytime via “Cookie settings” in the footer.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can delete your account in-app. Contact [CONTACT EMAIL — placeholder] or your local supervisory authority.