Privacy Policy

1. What this policy covers

This policy explains what data FrontDesk collects when you use our website and application, why we collect it, and the choices you have. It applies to account holders (hotels, B&Bs and their staff) and, where relevant, to the guest data they process through the Service.

2. Data we collect

Account data: name, email, password (stored hashed), property and billing details you provide when signing up.

Operational data you enter to run your property: bookings, guest names and contact details, rates, rooms, notes and documents required by local regulation (for example guest registration for tourist-tax or public-safety reporting).

Usage data: pages visited, actions taken in the app, and basic device/browser information, collected to keep the Service reliable and to understand which features are used.

Payment data: if you subscribe to a paid plan, payments are processed by Stripe; card details are entered on Stripe and never reach our servers. We keep only the Stripe customer and subscription identifiers, the plan and the billing status.

3. Why we collect it

To provide the Service (create bookings, run the planner, generate reports, send confirmation emails), to secure accounts, to bill paid subscriptions, to provide support, and to improve the product based on how it is actually used.

Legal bases (GDPR art. 6): performance of the contract with you for account, operational and payment data; our legitimate interest in keeping the Service secure and improving it for usage data and service emails about your account; legal obligation where we must keep records; your consent where we ask for it, which you can withdraw at any time.

4. Guest data

Hotels and B&Bs using FrontDesk act as the controller of the guest data they enter; FrontDesk processes it on their behalf to operate the Service (bookings, check-in/check-out, required regulatory exports). Account holders are responsible for having a lawful basis to process their guests’ data and for honoring guest requests regarding their own data.

5. Sharing

We do not sell personal data. We share data only with the service providers needed to run FrontDesk, under data processing agreements that limit their use of it to providing that service, or when required by law:

Supabase (database and authentication); Stripe (payment processing and subscription billing); Resend (delivery of transactional emails such as booking confirmations and account emails); our hosting provider in the European Union (application servers).

International transfers: some of these providers are based in, or may access data from, the United States. Where personal data leaves the European Economic Area, the transfer relies on the EU-U.S. Data Privacy Framework or on the European Commission Standard Contractual Clauses.

6. Data retention and deletion

We keep account and operational data for as long as the account is active. You can export your data at any time from the app. When you close your account, we delete or anonymize personal data within a reasonable period, except where longer retention is required by law (for example, fiscal or guest-registration records).

7. Security

We use industry-standard measures to protect data in transit and at rest, including access controls and encrypted connections. No system is perfectly secure, and we work to address issues promptly if they arise.

8. Your rights

Depending on where you are located, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. You can exercise these rights directly in the app (for your own account data) or by contacting us.

9. Cookies

We use a minimal set of cookies and similar technologies needed to keep you signed in and to understand basic, aggregate usage of the marketing site. We do not use cookies for third-party ad targeting.

10. Changes to this policy

We may update this policy as the Service evolves; material changes will be reflected on this page with a new "last updated" date.

11. Contact

Questions about this policy or requests regarding your data can be sent to info@frontdesk.lumnika.com.