Data processing agreement
As a host you are the controller for your guests’ data; Houslr is the processor. This agreement applies automatically as part of the terms as soon as you have an account. If you want a signed copy, email info@houslr.com.
Subject
Houslr processes the personal data of your guests and team members on your behalf, solely to deliver the service: bookings, payments, messages, access, cleaning and admin.
Which data
From guests: name, email address, phone number, place of residence or country, dates of stay, number of guests, names of fellow travellers for the guest register, payment status, messages and reviews. From team members: name, email address and role.
Instructions
Houslr only processes according to your instructions, as laid down in how the service works and the settings you choose. Houslr does not use the data for its own purposes and does not sell it.
Sub-processors
Supabase (database and authentication, EU), Amazon Web Services (hosting, EU), Resend (email), Mollie (payments, status only), Channex (channel connection, booking data from the channels only), Nuki (locks, PINs only). We announce a change at least a month in advance.
Security
Separation per host at database level, encryption of sensitive fields, https, daily backups, staff access only with a reason and logged. See the Security page.
Data breaches
Houslr reports a breach that affects your data within 48 hours of discovery, with what is known and what we are doing.
Rights of data subjects
If a guest asks for access or deletion, you help them yourself through the dashboard (export, delete). Houslr helps if the dashboard is not enough.
Termination
On cancellation you export your data. Houslr then deletes everything, except what the law requires us to keep (invoices, seven years).