← Back to login

Privacy Policy

Last updated: June 2025

1. About This Policy

Crafty Apps Pte Ltd ("we", "us", or "our") operates the BnB Info platform (the "Service"), which enables short-term rental property owners to manage their properties and provide a concierge experience for their guests.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. By using the Service you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account and Profile Data

When you create an account we collect your name, email address, and password (stored as a one-way hash). If you sign up via an OAuth provider (e.g. Google) we receive the name and email address your provider shares with us.

Property and Booking Data

To deliver the Service you provide information about your properties and units (address, WiFi credentials, house rules, photos, etc.) and your guests' bookings (guest name, check-in/check-out dates, confirmation code, entry code). This data is stored on your behalf and is accessible only to you and the guests whose confirmation codes match a booking.

Usage and Log Data

We may collect standard server log data including your IP address, browser type, pages visited, and timestamps. This is used for security monitoring and diagnosing technical problems and is not used for advertising.

Payment Data

Subscription payments are processed by our third-party payment provider. We do not store your full credit card number or payment card details on our servers. We receive a customer reference and subscription status from the payment provider.

3. How We Use Your Information

  • Provide, operate, and improve the Service
  • Authenticate your account and maintain security
  • Send transactional emails (account approval, trial expiry notices, password resets)
  • Manage your subscription and billing
  • Respond to support requests
  • Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Third-Party Services

We use the following sub-processors to operate the Service:

ProviderPurposeData location
SupabaseDatabase, authentication, file storageAWS (region configured per project)
ResendTransactional email deliveryUnited States
CloudflareAI inference (guest chatbot)Global edge network
PaddleSubscription billing and paymentsUnited Kingdom / United States

Each provider is bound by their own privacy policy and data processing agreements. We ensure they provide at least the same level of data protection as described in this policy.

5. Guest Data

If you use the Service as a property owner, you may enter data about your guests (name, booking dates, confirmation codes). You are responsible for ensuring you have the appropriate rights and consents to share guest data with us. We process this data only on your behalf and as necessary to provide the guest concierge functionality.

Guests who access the concierge portal do so using a confirmation code. We do not require guests to create an account, and we do not use their interaction data for any purpose other than providing the concierge response.

6. Data Retention

We retain your account and property data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g. financial records).

Log data is retained for up to 90 days.

7. Security

We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), row-level security on the database, hashed passwords, and service-role key isolation for administrative operations.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

8. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request we correct inaccurate or incomplete data
  • Deletion — request we delete your personal data ("right to be forgotten")
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests

To exercise any of these rights, please contact us at support@bnbinfo.app. We will respond within 30 days.

9. Cookies

We use cookies solely to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from staying logged in to the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. If changes are material, we will notify you by email or by a prominent notice in the dashboard. Your continued use of the Service after any changes constitutes your acceptance of the new policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Crafty Apps Pte Ltd

P.O. Box 13006, Suva, Fiji

Email: support@bnbinfo.app