Privacy policy

Personal data protection for the Bookerty Platform

Version 2.0 | Last updated: 24 June 2026

This Privacy Policy explains how BOOKERTY I.K.E. (BOOKERTY P.C.), trading under the name Bookerty ('Bookerty', 'we', 'us' or 'our'), collects, uses, stores, shares and protects personal data when you use the Bookerty Platform.

Bookerty is the data controller for the processing described in this Privacy Policy, unless stated otherwise. Bookerty is registered in Greece with GEMI number 182411246000, EUID ELGEMI.182411246000, VAT number 802768101, and address Vasil. Konstantinou 3, Xanthi, Greece, P.C. 67100.

For privacy matters, contact us at privacy@bookerty.com. Bookerty has not appointed a Data Protection Officer. This policy applies to https://www.bookerty.com, Bookerty applications, the Bookerty Platform, online reservations, payments, subscriptions, the Resolution Center, messaging, website services, booking engine services and channel manager services.

1. Personal data we collect

Depending on how you use Bookerty, we may collect and process the following categories of personal data:

• Account data: name, email, phone number, password or authentication identifiers, account status, role, language, preferences and account settings.

• Identity and verification data: identification details, business details, tax details, VAT number, registration data, authorization documents, KYC/KYB status and verification results where required.

• Host business and payout data: business name, legal form, address, tax office details where relevant, IBAN or bank payout references, Stripe Connect account identifiers, payout readiness, payout status, masked bank display data and settlement records.

• Guest booking data: reservation details, dates, guests, messages, payment status, payment references, policy snapshots, cancellation status, no-show status, refund status and support history.

• Payment data: Stripe Customer IDs, PaymentIntent IDs, SetupIntent IDs, Checkout Session IDs, Charge IDs, Transfer IDs, Refund IDs, subscription IDs, webhook event IDs, transaction status, payment method references and limited display data such as card brand, last four digits and expiry where returned by Stripe.

• Card and bank account data handled by Stripe: full card numbers, CVC, full bank account details and host verification documents are collected and primarily processed by Stripe, not stored in full by Bookerty.

• Listing and property data: property details, location, descriptions, images, amenities, availability, prices, restrictions, registration details, licensing data, house rules, policies, mapping data and operational settings.

• Messaging and communications: in-platform messages between Guests and Hosts, email communications, support requests, call or contact notes where applicable, notifications and customer service records.

• Resolution Center data: claims, evidence, photographs, videos, screenshots, invoices, repair estimates, timestamps, messages, payment evidence, decision records, payout holds, refund records and enforcement records.

• Technical and usage data: IP address, device identifiers, browser type, operating system, log data, session data, security events, cookies, analytics events, performance data and interaction data.

• Marketing and communication preference data: newsletter preferences, consent status, unsubscribe status, event invitations, campaign interactions and contact preferences.

• AI-assisted processing data: data processed or organized by AI-assisted tools for listing parsing, property data extraction, support triage, fraud/risk signals, review moderation assistance, dispute evidence organization and service improvement.

• Candidate and cooperation data: CVs, professional experience, education, certifications, contact details and related information where you apply to work or cooperate with Bookerty.

2. Sources of personal data

We collect personal data directly from you, from Hosts or Guests acting through the platform, from your use of the Bookerty Platform, from payment providers such as Stripe, from connected services and channel manager integrations, from cookies and analytics tools, from public or official sources where legally permitted, from support communications, and from third parties acting on your instruction or on Bookerty's behalf.

If you provide personal data about another person, such as an additional guest, co-host, staff member, company representative or invoice recipient, you are responsible for ensuring that you have the right to provide that data and that the person has been informed where required by law.

3. Purposes and legal bases

4. Payments, Stripe and saved payment methods

Bookerty uses Stripe as payment infrastructure for online reservations, Stripe Connect host onboarding, host payouts, saved Guest payment methods, refunds, webhooks and subscription billing. Stripe may act as an independent controller or processor depending on the payment activity and its own terms and privacy policy may apply.

For online reservations, Bookerty may create PaymentIntents on the Bookerty platform account, use Stripe.js and the Payment Element, collect new or saved payment methods, authorize or capture payments, save a payment method through SetupIntents, and make later off-session charges according to the booking policy.

Bookerty does not store full card numbers, CVC codes, full bank account numbers or host verification documents in the Bookerty application database. We may store Stripe object IDs, payment references, event IDs, status data, masked card or bank display data, payout status, subscription status and other limited information necessary to operate the Bookerty Platform.

Guests may manage saved payment methods where supported. Removing a saved payment method may affect pending or deferred reservations.

5. Resolution Center evidence and controlled storage

Resolution Center uploads may include photographs, videos, screenshots, invoices, receipts, repair estimates, messages, timestamps, payment evidence and other documents. These files are used for dispute handling, fraud prevention, evidence review, policy enforcement, payout holds, refunds, claims, support and legal protection.

Resolution Center uploads and sensitive evidence/KYC/dispute files are stored in controlled cloud storage, including AWS/S3 or equivalent controlled storage. Access is restricted to authorized personnel, contractors or providers who need access for the relevant purpose. Sensitive evidence, KYC, dispute, legal and payment files should not be sent to informal internal communication tools unless legally and operationally approved.

6. AI-assisted processing

Bookerty may use AI-assisted tools to support listing parsing, property data extraction, support triage, fraud/risk signals, review moderation assistance, dispute evidence organization and internal productivity. AI may help organize or suggest information, but Bookerty does not rely solely on fully automated processing to make final high-impact decisions about refunds, payouts, damages, account bans or legal disputes where human review is required.

7. Recipients and processors

Subject to confidentiality and access controls, personal data may be shared with the following categories of recipients and processors where necessary:

• Payment and payout providers, including Stripe, for payments, saved cards, verification, payouts, refunds, disputes, subscriptions and payment compliance.

• Cloud hosting, storage and infrastructure providers, including AWS/S3 or equivalent controlled storage providers.

• Email delivery and communication providers, including Zoho and ZeptoMail where used for email and transactional communications.

• Analytics and tag management providers, including Google Analytics via Google Tag Manager and PostHog, where cookies/consent settings permit.

• Connectivity and channel manager providers, including Channex or other providers, where Hosts use Channel Manager or related integration services.

• Professional advisers, accountants, lawyers, auditors, insurers and consultants.

• Support, security, fraud prevention, operational, automation and internal productivity service providers, where necessary and subject to appropriate safeguards.

• Hosts, Guests or other Members where necessary to perform a Reservation, provide support, process disputes or enable platform functionality.

• Public authorities, courts, tax authorities, regulators, law enforcement or other bodies where required by law or necessary to protect rights, safety and legal interests.

Where Bookerty uses processors, it requires appropriate contractual, technical and organizational safeguards. We do not sell personal data to advertisers.

8. International transfers

Some providers or systems may process data outside the European Economic Area. Where this occurs, Bookerty relies on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, processor agreements, technical measures or other lawful transfer mechanisms under applicable data protection law.

9. Retention

Bookerty retains personal data only for as long as necessary for the purposes described in this Privacy Policy, including account operation, reservation performance, payment settlement, tax and accounting obligations, legal claims, fraud prevention, dispute handling, security and compliance.

Retention periods may vary by data category. Account data is generally retained while the account is active and for a reasonable period after closure. Booking, payment, tax, invoice and settlement records are retained for the periods required by accounting, tax and legal rules. Resolution Center and legal-claim evidence may be retained for as long as needed to establish, exercise or defend legal claims. Candidate CVs may be retained for up to 6 months unless a longer period is lawful and justified. In any case, certain data may be retained up to 20 years where necessary for legal claims or mandatory legal obligations.

Where possible, Bookerty anonymizes or aggregates data so that it no longer identifies you and may use such data without further notice.

10. Security

Bookerty uses technical and organizational measures designed to protect personal data, including access controls, controlled storage, payment provider tokenization, webhook verification, audit records, restricted access to sensitive evidence, and provider safeguards. No system is perfectly secure, and you are responsible for keeping your account credentials confidential.

11. Your rights

Subject to applicable law and limitations, you may have the right to access your personal data, request rectification, request erasure, restrict processing, object to processing, withdraw consent, request portability, and lodge a complaint with a supervisory authority.

To exercise rights, contact privacy@bookerty.com. We may need to verify your identity before responding. Withdrawal of consent does not affect processing that occurred before withdrawal or processing based on another legal basis.

You may also lodge a complaint with the Hellenic Data Protection Authority (HDPA), including through its published contact channels, if you believe that your data protection rights have been violated.

12. Cookies, analytics and marketing

Bookerty uses cookies and similar technologies as described in the Cookies Policy. Non-essential analytics cookies and similar technologies, including Google Analytics via Google Tag Manager and PostHog where used, should be loaded according to applicable consent rules.

PostHog is used for product analytics, performance measurement, error tracking and session recording. PostHog data is hosted in the European Union (currently eu.i.posthog.com). If you accept non-essential analytics cookies, PostHog may store a persistent identifier and, if you are logged in, link activity to your account. If you reject those cookies, Bookerty configures PostHog not to use cookies to identify you. Session recording masks input fields and excludes sensitive form fields where configured. Further detail is in the Cookies Policy.

Bookerty does not currently use Meta Pixel, TikTok Pixel, Microsoft Clarity or Hotjar according to the current implementation information provided for this version.

You may unsubscribe from marketing emails using the unsubscribe link or by contacting Bookerty. Service, booking, payment, security and account communications may still be sent where necessary.

13. Children

The Bookerty Platform is not intended for persons under 18 acting independently. Where personal data of minors is processed in relation to a booking, the adult making or managing the Reservation is responsible for having the legal authority to provide and manage that data.

14. Changes to this Privacy Policy

Bookerty may update this Privacy Policy from time to time. Material changes may be communicated through the Bookerty Platform, by email or by another reasonable method. The latest version will be available through the Bookerty Platform.

15. Contact details

Controller: BOOKERTY I.K.E. (BOOKERTY P.C.), trading as Bookerty.

Address: Vasil. Konstantinou 3, Xanthi, Greece, P.C. 67100.

GEMI: 182411246000 | EUID: ELGEMI.182411246000 | VAT: 802768101.

Privacy contact: privacy@bookerty.com. Legal contact: legal@bookerty.com.