Privacy Policy

1. A Note on Guest Data — What We Do Not Collect

RevBnB is designed so that it does not ingest, process, or store short-term rental guest personal data. The platform connects only to your pricing and listing data sources (such as PriceLabs) and works with listing-level and reservation-level pricing signals — rates, occupancy, length of stay, lead time, booking and check-in dates, and similar non-identifying fields. We do not request, and our systems are designed not to retain guest names, guest contact details, payment identifiers, or any other information that identifies an individual guest. Where a connected data source would otherwise transmit such fields, they are excluded or de-identified at ingestion.

The personal data we do handle relates to you, our customer — primarily your account and usage information, as described below.

2. Information We Collect

Account information you provide. When you create an account, connect an integration, or contact support, we collect information such as your name, business name, email address, and the credentials or authorisation tokens needed to connect your third-party accounts (for example, PriceLabs).

Platform and listing data. When you connect an integration, we receive listing-level and reservation-level pricing data necessary to deliver revenue management services. As stated in Section 1, this excludes guest personal data.

Usage data. We automatically collect technical and usage information — pages visited, features used, device and browser information, IP address, and interaction logs — to operate, secure, and improve the platform.

3. How We Use Your Information

We use the information described above to:

• provide, operate, and improve the RevBnB platform and AI pricing agent;
• connect to and synchronise with your authorised integrations (such as PriceLabs) on your behalf;
• generate and deliver pricing recommendations, alerts, and performance reports;
• respond to support requests and send service communications relating to your account;
• send product updates and marketing communications, from which you may opt out at any time (we will only send marketing emails where permitted by applicable law);
• detect, prevent, and investigate fraud, abuse, or unauthorised access; and
• comply with our legal and regulatory obligations.

4. Legal Bases for Processing

We process personal data only where we have a lawful basis to do so.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") — which applies to RevBnB as a UAE-registered establishment — we rely on your consent and/or on the processing being necessary to perform our contract with you, to comply with a legal obligation, or for our legitimate business interests in operating and securing the platform.

For customers in the European Economic Area and the United Kingdom, where the EU/UK General Data Protection Regulation ("GDPR") applies to our processing of your account data, our legal bases are: (a) performance of a contract (to provide the Service you sign up for); (b) legitimate interests (to secure, analyse, and improve the platform, and to communicate with you), balanced against your rights; (c) consent (for non-essential cookies and optional marketing); and (d) legal obligation where applicable.

5. Automated Processing

The RevBnB pricing agent generates rate recommendations using automated analysis of listing-level and reservation-level data. These recommendations relate to your listings and are applied only with your review and approval — we do not make decisions that produce legal or similarly significant effects on you as an individual through solely automated means. The automated analysis does not use guest personal data (see Section 1).

6. Data Sharing and Sub-Processors

We do not sell your personal data.

We share data only with trusted service providers ("sub-processors") who help us operate the platform — for example, cloud hosting, infrastructure, and analytics providers — and only to the extent necessary to provide those services. All sub-processors are bound by contract to protect your information and to process it only on our instructions.

We may also disclose information where required by law, regulation, or valid legal process, or where necessary to protect the rights, property, or safety of RevBnB, our users, or the public.

7. International Data Transfers

RevBnB is based in the United Arab Emirates and uses infrastructure hosted in [HOSTING REGION(S)]. As a result, your information may be transferred to, stored in, and processed in countries outside the one in which you are located.

For customers in the EEA or UK: because the UAE has not received an EU adequacy decision, transfers of your personal data outside the EEA/UK are made subject to appropriate safeguards — specifically the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where relevant) — or another lawful transfer mechanism. A copy of the relevant safeguards is available on request.

Under the PDPL, cross-border transfers of personal data are made only where an adequate level of protection or an appropriate safeguard or exception applies.

8. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Account data — for the duration of your account, and for up to 90 days after closure to allow for reactivation and to resolve disputes;
• Listing and reservation pricing data — for as long as needed to provide the Service and generate historical analytics, and thereafter in aggregated or de-identified form;
• Usage and security logs — for up to 12–24 months; and
• where a longer period is required by law (for example, tax or accounting obligations), for that longer period.

You may request deletion of your account and associated personal data at any time (see Sections 9 and 14).

9. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; withdraw consent (without affecting prior processing); opt out of marketing communications; and request data portability.

EEA/UK customers additionally have the right to lodge a complaint with their local supervisory authority. UAE-based individuals may raise concerns with the UAE Data Office.

To exercise any right, contact us at tech@revbnb.ai. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.

10. Security

We use industry-standard encryption to protect data in transit and at rest, and we restrict access to personal data to authorised personnel on a need-to-know basis. We maintain organisational and technical measures appropriate to the risk. In the event of a personal data breach affecting your data, we will notify you and the relevant authority where, and within the timeframes, required by applicable law.

11. Cookies

We use cookies and similar technologies to operate the platform, remember your preferences, and analyse usage. For visitors in the EEA/UK, non-essential cookies are set only with your prior consent, which you can give or withdraw through our cookie banner. Other users can manage cookies through their browser settings; disabling cookies may affect platform functionality.

12. Children

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or in-app notice. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

14. Contact

For privacy questions or to exercise your rights, contact us at tech@revbnb.ai, or write to [REGISTERED ENTITY NAME] (FZE), [FREE ZONE ADDRESS], Sharjah, United Arab Emirates.