Pravila privatnosti

Our Commitment

At bsynqed, we believe in “Your Data, Your Control.” We built this platform for independent property operators who value transparency and trust. We're committed to protecting your privacy and being transparent about how we collect, use, and protect your information.

This Privacy Policy explains our practices regarding data collection, usage, and your rights. We've written it in plain language because we believe you should understand what happens with your data.

Information We Collect

We collect information necessary to provide and improve our services:

• Account Information: Name, email address, phone number, and property details you provide during registration
• Property Data: Property information, room/bed configurations, rates, availability, and booking data
• Booking Data: Guest information, booking details, payment information (processed securely through Stripe/PayPal)
• Usage Data: How you interact with our platform to help us improve the service
• Technical Data: IP address, browser type, device information for security and functionality

How We Use Your Information

We use your information to:

• Provide and maintain our PMS and Channel Manager services
• Process bookings, payments, and manage your property operations
• Sync data with OTA partners (Booking.com, HostelWorld) as you configure
• Send you important service updates and notifications
• Improve our platform based on your usage and feedback
• Ensure security and prevent fraud
• Comply with legal obligations

We never sell your data. We don't share your information with third parties except as necessary to provide our services (e.g., OTA integrations you configure, payment processors) or as required by law.

Data Sharing

We share your data only when necessary:

• OTA Partners: When you connect Booking.com, HostelWorld, or other OTAs, we sync availability and booking data as configured
• Payment Processors: Stripe and PayPal process payments securely - we don't store full payment card details
• Service Providers: We may use trusted third-party services for hosting, email delivery, and analytics (all bound by confidentiality agreements)
• Legal Requirements: If required by law or to protect our rights and safety

Google User Data & Third-Party Calendar Connections

bsynqed lets you connect a third-party calendar (such as Google Calendar or Microsoft Outlook) so the Meetings feature can check your availability and keep your bookings in sync. When you connect a Google account, bsynqed accesses your Google data only to provide this feature.

What we access, and why:

• Free/busy times: so we know when you are already busy and guests cannot book you during those times (preventing double-bookings).
• Calendar events: to create, update, and remove events for meetings booked through bsynqed, and to show your existing events inside your bsynqed calendar.

How we protect it: the access you grant is stored as encrypted OAuth tokens (AES-256-GCM) and used only to operate the calendar features you enabled. You can disconnect your calendar at any time inside bsynqed, and revoke bsynqed's access from your Google Account permissions; once disconnected, we stop accessing your Google data.

Limited Use: bsynqed's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to develop, improve, or train generalized artificial-intelligence or machine-learning models. We do not transfer Google user data to others except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition with your consent.

Your Rights

You have control over your data:

• Access: Request a copy of all data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal retention requirements)
• Data Portability: Export your data in a machine-readable format
• Objection: Object to certain types of data processing
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. We'll respond within 30 days.

Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in and maintain your session
• Remember your preferences and settings
• Analyze how our platform is used to improve it
• Ensure security and prevent fraud

You can control cookies through your browser settings. Note that disabling cookies may affect some platform functionality.

Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication with two-factor authentication support
• Role-based access controls
• Regular security audits and updates
• Secure data backups

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Offline Data Storage

To provide a better user experience, our portal and booking engine may store limited data on your device when you use our services offline:

• Basic Booking Information: Encrypted booking status, dates, and property information (expires after 7 days)
• Product Catalog: Menu items and product information for offline browsing (no personal information)
• Draft Orders: Shopping cart items with customer first name only (expires after 24 hours, encrypted)
• UI Preferences: Theme, language, and display settings (no personal information)

What we do NOT store offline:

• Payment methods, card numbers, or CVV codes
• Full guest profiles or customer information (only first name in draft orders)
• Message drafts or unencrypted messages
• Full invoice details
• Authentication tokens (stored securely in httpOnly cookies only)

Security Measures:

• All sensitive offline data is encrypted using AES-256-GCM encryption
• Encryption keys are generated per session and stored only in sessionStorage (cleared when you close your browser)
• Encryption keys are never transmitted to our servers
• Automatic expiration and cleanup of stored data
• All offline data is securely deleted when you log out

You can clear all offline data at any time through your browser settings or by logging out of your account.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you cancel your account, we retain data for 90 days to allow for account recovery, after which we delete it unless legal requirements mandate longer retention.

Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or through our platform. The “Last updated” date at the top indicates when changes were made.