Privacy Policy

EasyRentFlow ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vacation rental management platform.

1. Information We Collect

We collect the following types of information:

• Account information: company name, email address and country when you sign up; if you add them, business details (legal name, VAT number, tax code, address, billing email and phone)
• Property data: property details, booking information, and financial records you enter into the platform
• Guest data: information about your guests that you input for registry and compliance purposes
• Technical data: IP address, browser type and the pages requested, in server logs kept for 14 days, and technical error reports

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our vacation rental management services
• Process transactions and send related notifications
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests

3. Cookies and Tracking

This website uses no analytics or advertising cookies and no tracking scripts. The only cookie it sets remembers your language. Like every web server, ours records each request (IP address, page, date and time, referring page and browser type) for security; these server logs are deleted after 14 days. From them we compute aggregate statistics — pages viewed, visitors per day, languages and where visitors come from — which contain no IP address and cannot identify you. The platform uses only what is needed to keep you signed in.

4. Third-Party Services

We use a few services to run the platform, each only for its own task: Stripe (subscription payments), Google (sending email through Gmail, and a daily off-site backup in Google Drive kept for 30 days), Sentry (error reports from our server) and, only if you turn them on, Telegram (booking notifications) and Anthropic (if you connect Claude to your account). We do not sell your data or share it with advertising or marketing platforms.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to the processing of your personal data

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymized.

7. Data Security

We protect your data with HTTPS encryption in transit, identity documents encrypted at rest (AES-256-GCM), passwords stored only as bcrypt hashes, a separate database for each account, limits against password guessing, and daily backups. No method of transmission over the Internet is 100% secure.