Last updated: June 2026
Crafty Apps Pte Ltd ("we", "us", or "our") operates the BnB Info platform (the "Service"), which enables short-term rental property owners to manage their properties and provide a digital guidebook experience for their guests.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. By using the Service you agree to the collection and use of information as described in this policy.
When you create an account we collect your name, email address, and password (stored as a one-way hash). If you sign up via an OAuth provider (e.g. Google) we receive the name and email address your provider shares with us.
To deliver the Service you provide information about your properties and units (address, WiFi credentials, house rules, photos, etc.) and your guests' guidebooks (guest name, check-in/check-out dates, confirmation code, entry code). This data is stored on your behalf and is accessible only to you and the guests whose confirmation codes match a guidebook.
We may collect standard server log data including your IP address, browser type, pages visited, and timestamps. This is used for security monitoring and diagnosing technical problems and is not used for advertising.
Subscription payments are processed by our third-party payment provider. We do not store your full credit card number or payment card details on our servers. We receive a customer reference and subscription status from the payment provider.
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
We use the following sub-processors to operate the Service:
| Provider | Purpose | Data location |
|---|---|---|
| Supabase | Database, authentication, file storage | AWS (region configured per project) |
| Resend | Transactional email delivery | United States |
| Cloudflare | AI inference (guest chatbot) | Global edge network |
| Paddle | Subscription billing and payments | United Kingdom / United States |
Each provider is bound by their own privacy policy and data processing agreements. We ensure they provide at least the same level of data protection as described in this policy.
If you use the Service as a property owner, you may enter data about your guests (name, guidebook dates, confirmation codes). You are responsible for ensuring you have the appropriate rights and consents to share guest data with us. We process this data only on your behalf and as necessary to provide the guest digital guidebook functionality.
Guests who access the digital guidebook do so using a confirmation code. We do not require guests to create an account, and we do not use their interaction data for any purpose other than answering their questions about the property. Conversations a guest has with the Stay Assistant are visible to the property owner, who may review them to improve their guidebook and the guest experience; guests are informed of this in the chat.
We retain your account and property data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, with two narrow exceptions: (a) records we are required to keep by law or that our payment processor retains for financial and tax purposes, and (b) a one-way cryptographic hash (a "fingerprint") of your email address, which we keep solely to prevent repeated abuse of our free trial. That fingerprint cannot be reversed to recover your email, and we never use it to identify, profile, or contact you; our lawful basis is our legitimate interest in preventing fraud and abuse. We do not retain a usable copy of your email or any other personal data after deletion.
Log data is retained for up to 90 days.
We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), row-level security on the database, hashed passwords, and service-role key isolation for administrative operations.
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
Depending on your location, you may have the right to:
To exercise any of these rights, please contact us at support@bnbinfo.app. We will respond within 30 days.
You can permanently delete your account and all associated data at any time, with no need to contact us. Sign in, go to Settings → Danger zone → Delete account, and confirm. This immediately and irreversibly removes your profile, properties, units, guidebooks, house manuals, rules, attractions, uploaded images, and chatbot data. Any active subscription is set to cancel at the end of the period you have already paid for, so you are not billed again. If you signed up using a social login (such as Facebook or Google), this also removes the data we received from that provider. See "Data Retention" above for the limited, non-identifying information we keep after deletion to prevent free-trial abuse.
If you can no longer sign in, email support@bnbinfo.app from the address associated with your account and we will delete your data within 30 days.
We use cookies solely to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from staying logged in to the Service.
We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. If changes are material, we will notify you by email or by a prominent notice in the dashboard. Your continued use of the Service after any changes constitutes your acceptance of the new policy.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: