DRAFT — pending legal review before public launch
Privacy Policy
Last updated: April 17, 2026
Who we are
BnBoost is operated as a sole proprietorship based in Belgium. For any privacy question or to exercise your GDPR rights, write to hello@bnboost.com.
What we collect
When you submit an Airbnb URL for a free score, we collect the URL itself, your IP address (used for rate limiting), and any data the public Airbnb listing exposes to our scraper. If you provide an email address to receive your score by mail, we store that email and link it to the audit record.
When you purchase a full audit, Stripe handles your payment and shares with us only the minimum required to issue the receipt and link the payment to your audit. We do not see or store your full card number.
How we use it
Listing data is used to generate your audit and is retained so we can show your past audits, compare a listing against future audits, and improve the underlying scoring model. Your email is used to deliver the audit you requested and, if you opt in, to send a follow-up rescore reminder. We never sell or rent your contact information.
Aggregated and anonymized listing statistics may be used for research, content, or product benchmarks. Anything we publish externally is stripped of identifiers that point back to a specific host.
Who processes the data on our behalf
We use a small set of subprocessors, each chosen for its EU-friendly compliance posture. Supabase hosts the database and authentication. OpenAI runs the language model that produces your audit text and recommendations. Apify operates the scrapers that collect public listing data. Stripe processes payments. Resend delivers transactional email. Each of these has its own privacy terms and a standard Data Processing Agreement that applies to your data.
How long we keep it
Audit records are kept indefinitely so you can revisit them and so historical comparisons remain meaningful. You can ask for deletion at any time and we will remove your audits, listings, and email from our database within thirty days. Payment records may be retained beyond that window when Belgian or EU bookkeeping law requires it.
Your GDPR rights
You have the right to access the personal data we hold about you, to correct it, to ask for its deletion, to object to processing, and to receive a portable copy. To exercise any of these rights, write to hello@bnboost.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority if you believe your rights have been violated.
Cookies and analytics
BnBoost does not use advertising cookies or third-party tracking. The only cookies we set are strictly necessary for the application to function, such as remembering your audit session. If we add product analytics in the future, we will use a privacy-respecting tool that does not require a consent banner under EU law and we will update this policy before turning it on.
Changes to this policy
When we change this policy, we update the date at the top of this page. Material changes that affect your data are also announced by email to active customers.
See also our Terms of Service.