Privacy

What we collect and why

We collect property operators’ names, email addresses and property names, the read-only credential for their channel manager, access logs, and how the service is used, and use them only for the following. We do not collect guests’ personal data.

• Running the service: publishing property information, checking property sites, signing in
• Answering enquiries
• Preventing abuse and fixing faults
• Improving the service

Sharing and processors

We do not give personal data to third parties unless you agree or the law requires it. What AI agents see is only the property information a property chose to publish.

We use outside companies for hosting, relaying traffic and stopping abuse, email, handling enquiries, sign-in, the voice demo and usage analytics. Those abroad are bound by contract to measures equivalent to those Japan’s personal information law requires, and we will tell you what they are on request.

When you fill a property’s details from pasted text or files in the console, an AI service provider (processing may take place outside Japan) reads that text and those files for us. Neither is kept.

Where personal data is handled

The service’s servers and database are in Japan (Tokyo). Our processors handle personal data in these countries:

• Running the servers and database: Japan
• Relaying traffic and stopping abuse: a United States company, at its locations worldwide
• Email, handling enquiries, the voice demo: the United States
• Sign-in: Japan (LINE) or the United States (Google)
• Usage analytics: Germany
• Reading pasted text and files: possibly outside Japan

Security

Access is limited to those who need it, connections and credentials are encrypted, and processors are supervised. We have checked the data protection law of the United States and Germany.

How long we keep it

We keep personal data as follows.

• The result of a site check: deleted 30 days after the check. The record that a check was run (which site, when, and the browser’s identifier) is kept, so that an expired result can say it has expired.
• An organization’s data (property information, the channel manager connection, photos): deleted when the organization is closed.
• The name and email address you sign in with: not deleted automatically. You may ask us to delete them at the address below.
• Enquiries: not deleted automatically.
• Backups: deleted data stays in backups for up to 14 days.

Cookies and data sent from your browser

Cookies and browser storage keep you signed in, remember your language, list your site checks, and support usage analytics. None are used for advertising.

If you check a site without signing in, a random identifier is stored in a cookie so your checks can be listed. It lasts 90 days.

For usage analytics, our pages send PostHog, Inc. the pages viewed, buttons pressed, a record of interactions with inputs masked, and a device identifier. Nothing is sent if your browser has Do Not Track on.

To show a map, the property information page of the console sends Google LLC your IP address, browser information and the location of the property shown.

Requests and complaints

You may ask us to tell you the purpose of use of, disclose, correct, add to, delete, stop using, erase or stop sharing the personal data we hold about you, or to disclose our records of sharing it. We will confirm who you are and answer without delay, free of charge. Complaints about how we handle personal data go to the same address.

Contact: hello@vibebooking.ai

Business: Eduardo Suda (VibeBooking). Address: given without delay on request.