Privacy Policy

Article 1. Information We Collect

PriceBnb collects the following information to provide the Service:

1. Information Collected During Registration

• Email address
• Password (stored encrypted)
• Google account information (when using social login)

2. Information Collected During Service Use

• Airbnb listing URLs and listing information (pricing, base guests, amenities, etc.)
• Service usage records, access logs, device information

3. Payment Information

• Payment information is processed directly by Polar (polar.sh). PriceBnb does not directly store sensitive payment information such as card numbers.
• Polar customer ID and subscription ID are stored for service operations.

Article 2. How We Use Your Information

• Service provision and operation (competitor analysis, pricing suggestions, weekly report generation)
• Member management and identity verification
• Subscription payment processing and management
• Service-related notices and notifications (weekly reports, billing and subscription alerts, etc.)
• Service improvement and new feature development
• Customer support

Article 3. Data Storage

Member personal information and service data are stored on the following infrastructure:

• Supabase: Database and authentication (PostgreSQL-based, with Row Level Security)
• Cloudflare: Web application hosting and batch processing

Data is protected through encrypted transmission (TLS/SSL) and access control (RLS) ensures that only the owner can access their data.

Article 4. Third-Party Services

We use the following third-party services to provide our Service:

Each third-party service processes data in accordance with its own privacy policy.

Article 5. Cookies and Analytics

• The Service uses cookies to maintain user preferences such as language settings.
• Google Analytics: We use Google Analytics to analyze service usage. Google Analytics collects anonymized usage data through cookies.
• You can disable cookies in your browser settings, but some service features may be limited.

Article 6. Data Retention

• Personal information is deleted immediately upon account termination. However, information required to be retained by applicable laws will be kept for the required period.
• Transaction records under the Electronic Commerce Act: 5 years
• Access logs under the Protection of Communications Secrets Act: 3 months
• After subscription cancellation, report data is retained for 30 days before deletion.

Article 7. User Rights

Members may exercise the following rights:

• Right of Access: You can check the status of your personal data processing.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure: You can request deletion of your personal data. Deleting your account will remove all associated data.
• Right to Restriction: You can request restriction of data processing in certain circumstances.
• Right to Data Portability: You can receive your data in a machine-readable format.

You can exercise the above rights by contacting support@price-bnb.com. Requests will be processed within 10 days of receipt.

Article 8. Children's Privacy

The Service is not directed to children and follows these minimum-age thresholds: 13 years in the United States (COPPA), 14 years in the Republic of Korea, and 16 years in the EU/EEA (GDPR Art. 8, subject to member-state law). If we learn that a child below the applicable threshold has registered, we will delete the account and associated information promptly.

Article 9. International Data Transfers

Data collected for service provision may be stored and processed on overseas cloud infrastructure (Supabase, Cloudflare, Polar, etc.). While data protection levels in those countries may differ from Korea, we apply appropriate protective measures (encryption, access control, etc.).

Article 10. GDPR Compliance (EU/EEA/UK Users)

For users in the EU/EEA and the United Kingdom, the following additional rights are guaranteed under the GDPR and UK GDPR:

• Right to withdraw consent: You may withdraw consent at any time for consent-based data processing.
• Right to object: You may object to data processing based on legitimate interests or direct marketing.
• Right against automated decision-making: The Service does not perform fully automated decisions producing legal or similarly significant effects.
• You have the right to lodge a complaint with a supervisory authority (e.g., your EU national DPA, the UK ICO).

Legal basis for processing: Contract performance (GDPR Art. 6(1)(b)), Legitimate interests (Art. 6(1)(f) — service quality, security), Consent (Art. 6(1)(a) — newsletters, analytics cookies), Legal obligation (Art. 6(1)(c) — tax and accounting).

Transfer mechanism: For transfers from the EU to third countries, we rely on Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions. A list of our sub-processors is available on request.

Article 10-B. California Privacy Rights (CCPA/CPRA)

California residents may exercise the following rights under the California Consumer Privacy Act (CCPA, 2018) and the California Privacy Rights Act (CPRA, 2023):

• Right to know: Request the categories and sources of personal information collected, used, or shared in the past 12 months.
• Right to delete: Request deletion of your personal information (subject to legal retention exceptions).
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out: We do not "sell" or "share" personal information as defined by the CCPA/CPRA.
• Right to limit use of sensitive personal information: You can request limitation to purposes necessary for service provision.
• Right to non-discrimination: You will not be discriminated against in pricing or quality for exercising these rights.

Notice of sale/share — PriceBnb has not sold personal information or shared it for cross-context behavioral advertising in the past 12 months. Google Analytics use is limited to aggregate statistics and is not used for ad targeting.

To exercise these rights, email support@price-bnb.com. Verifiable requests will be processed within 45 days (extendable once by 45 days). You may designate an authorized agent to make requests on your behalf.

Article 10-C. Other US State Privacy Laws

Where other US state privacy laws apply — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA) — residents of those states may exercise rights similar to those listed for California (access, deletion, correction, opt-out of targeted advertising / sale). Requests may be sent to support@price-bnb.com.

Article 11. Changes to This Policy

If this Privacy Policy is changed, we will notify you at least 7 days in advance through in-service notices or email. For significant changes, we will provide 30 days' notice.

Article 12. Contact for Privacy Inquiries

For inquiries, complaints, or rights requests regarding personal data processing, please contact:

• Service: PriceBnb
• Privacy Officer: PriceBnb Privacy Team
• Email: support@price-bnb.com