Privacy Policy
In accordance with the GDPR, this policy describes how your personal data is processed.
Data collected
Identity (last name, first name, email, phone), booking and payment data (via Stripe), exchanged messages, reviews submitted.
Purposes
Account, booking and payment management, connecting hosts and guests, security, legal and accounting obligations.
Legal basis & retention
Performance of the contract, consent (cookies), legal obligations. Data is kept for as long as necessary and then anonymized.
Your rights
Access, rectification, erasure, portability, objection. From your dashboard, you can export your data and delete your account. Contact: privacy@allyhomes.io.
Processors
Stripe (payments), Cloudinary (images), Neon (database hosting, EU), Vercel (app hosting). Depending on configuration: Anthropic (AI assistant, USA — covered by Standard Contractual Clauses) and an SMS/WhatsApp provider (phone verification and notifications). European users data is hosted in the EU; any transfers outside the EU are framed in accordance with the GDPR.