Privacy Policy
Last updated: May 15, 2026. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
Data you provide directly: name, email address, password (stored hashed), phone number (optional), listing photos, descriptions, and prices.
Automatically generated data: IP address, device and browser type, pages visited on the platform, date and time of visits.
Subscription data: your selected plan and subscription date. Payment card details are not stored by us — they are processed by Stripe in accordance with PCI DSS.
2. How We Use Your Data
To provide and improve platform services (displaying listings, messaging between hosts and tenants, processing subscriptions).
To send transactional emails (booking confirmations, status notifications, support).
For platform security: fraud detection, abuse prevention.
We do not sell your data to third parties or use it for direct marketing without your consent.
3. Third-Party Services
Supabase — database and authentication (EU-based servers).
Stripe — payment processing.
Resend — transactional email delivery.
Cloudinary — photo storage and delivery.
Each provider has its own privacy policy and security standards.
4. Data Retention
We retain your data while your account is active. If you request account deletion, we delete your personal data within 30 days, except data we are legally required to retain (e.g., financial records).
5. Your Rights
Access: you may request a copy of the data we hold about you.
Correction: you may update inaccurate data directly in your account settings.
Deletion: you may request deletion of your account and data by emailing us at the address below.
Portability: you may request your data in a machine-readable format.
To exercise these rights, contact us at: support@pawrentbalkans.com
6. Cookies
We use only functional cookies necessary for the platform to operate (authentication, language preference). We do not use tracking or advertising cookies.
7. Security
We apply industry-standard security measures (HTTPS, password hashing, restricted database access). No system is 100% secure — we recommend using a strong password.
8. Governing Law
This policy is governed by the laws of the United States. We endeavor to respect the fundamental rights of EU users (access, correction, and deletion) as a matter of good practice.
9. Policy Changes
We will notify you of material changes by email or via a platform notice at least 14 days before they take effect.
10. Contact
For all privacy-related questions, contact us at: support@pawrentbalkans.com