Privacy policy

1. Who is responsible

Byte Bunny S.L.U. is the controller of the personal data described in this policy. Our registration details and postal address are on the legal notice page. For anything about your data write to privacy@bunnyown.com.

2. Data we process as a controller

• Account and workspace data — name, email address, the company you represent, your role, sign-in events, your language and theme, and what you do in the dashboard. Basis: performing the contract with the business you represent (art. 6(1)(b) GDPR) and our legitimate interest in keeping the service secure (art. 6(1)(f)).
• Billing data — billing contact, invoices, payment status, and the billing details an invoice names: legal name, tax id (NIF, CIF or NIE) and address — when you are an autónomo or a private person, these are your own. Card details are entered on our payment provider's pages and never reach us. Basis: the contract and our legal obligations to keep accounting records (art. 6(1)(c)).
• Acceptance records — which version of the terms you accepted, when and from which IP address. Basis: our legitimate interest in being able to prove the contract.
• Visitors of bunnyown.com — we run our own, cookieless analytics: pages viewed, referrer, country, browser type, with no identifier that follows you across sites. Basis: legitimate interest in understanding how the site is used. The only cookies we set are the ones needed to keep you signed in and to remember your language and theme; there is no advertising or tracking cookie, so there is no cookie banner.
• Email you send us — the message and address, to answer you. Basis: legitimate interest, or the contract when you are a customer.

3. The BunnyOwn app

The BunnyOwn app for iPhone, iPad and Android is another way into your BunnyOwn account. It shows and changes the same workspace data as the dashboard, with the same role and permissions, and adds only what follows.

• On your device — the sign-in token, kept only in the device's secure storage, and your app settings (language, the notifications you want, whether the app locks with Face ID or a fingerprint). The face or fingerprint check is done by the device; we never receive it. Signing out removes the token.
• Notifications — if you allow them, we keep the device's push address, its language and the notifications you chose, linked to that sign-in, only to send you those notifications. Apple (iPhone and iPad) and Google (Android) deliver them; a notification names the website and the kind of event, never a guest's name or message. The address is deleted when you sign out, when the sign-in is disconnected in the workspace, or when Apple or Google tell us the app is gone. Basis: the contract (art. 6(1)(b)).
• Photos and videos — what you add to your workspace's media library leaves the phone without its location or camera details.
• Crash reports, if you agree — the app asks once whether to send them, and you can change your answer at any time in Settings; until you agree, nothing is stored for them or sent. When the app crashes or meets an error, it then sends the app version, the error and where in the code it happened, the device model and operating system, and the screens just before it to our own error-tracking server, hosted by Hetzner in Germany. A report carries no name, email address, account id, message or booking content and is not linked to you; the server keeps only the first three parts of the sending IP address. Reports are deleted after 90 days. Basis: your consent (art. 6(1)(a)), which you can withdraw in Settings without affecting reports already sent.
• Signing in — happens on our sign-in page in your browser, with Sign in with Apple or Google if you choose them; the app never sees your password.

The app has no analytics, no advertising identifier and no tracking across apps or websites, and it does not read your location.

Guests' and travellers' data in the app. The messages, bookings, guest details and traveller registers the app shows or sends belong to the business you work for: that business is the controller, and we process the data on its behalf under the Data Processing Agreement (section 4). This includes what a partner types when booking for a guest — the guest's contact details and, where the stay needs the traveller register Real Decreto 933/2021 requires, each traveller's name, sex, date of birth, nationality, identity document, address and contact details and, for a minor, their relationship to the adult travelling with them. The register is stored encrypted, never shown back, and kept for the three years the decree sets.

You can delete your account from the app under Settings → Delete account (section 8).

4. Data we process for our customers

When you book, enquire, pay or write through a website a business runs on BunnyOwn, that business is the controller of your data and we process it on its behalf under our Data Processing Agreement. Ask that business first; we forward any request we receive to them and help them answer it.

5. Who receives data

Our service providers, each bound by a data-processing contract: Hetzner Online GmbH (hosting, Germany and Finland), Cloudflare, Inc. (DNS, delivery and protection; data processing addendum and EU–US Data Privacy Framework certification), Stripe Payments Europe, Ltd. (payments, Ireland) and Resend, Inc. (email; standard contractual clauses), and Apple Inc. and Google LLC, only to deliver the BunnyOwn app's notifications (EU–US Data Privacy Framework certification). Public authorities when the law obliges us. Nobody else, and never for their own marketing.

6. AI assistants you connect

You can connect an AI assistant, such as Claude (Anthropic) or ChatGPT (OpenAI), to a BunnyOwn workspace by signing in to BunnyOwn from the assistant and approving the connection for one workspace. The assistant can then read and change that workspace's content — websites, pages, posts, listings, calendars, booking processes and message templates — within your role's permissions.

• What is shared — when the assistant uses a BunnyOwn tool, the result goes to the assistant's provider. It can include personal data held in your workspace, such as a guest's name on a booking or the details of a booking request. We never send an assistant guests' identity documents, payment card details, passwords, API keys or other credentials, and the assistant cannot make payments or refunds through BunnyOwn.
• Who is responsible — you choose the assistant, and its provider processes what it receives under your own agreement with that provider and its privacy policy; it is not one of our service providers (section 5). We do not sell this data, and we do not use it, or your conversations with the assistant, to train AI models. We do not receive or store your conversations with the assistant.
• What we keep — for each connection, the client's name, who connected it, when it was created and last used, and its access tokens in hashed form, for as long as the connection exists. Changes the assistant makes are recorded in the workspace's history under your name, as if you had made them on the dashboard. Basis: the contract (art. 6(1)(b)).
• How to stop — on the dashboard, Settings → Connections lists every connection, and Disconnect ends it immediately. Removing a member from the workspace also ends their connections. You can also remove BunnyOwn in the assistant's own settings.

7. How long we keep data

Account and workspace data for the term of the contract and 30 days after, then it is deleted (backups expire within a further 30 days). Invoices and accounting records for six years, as Spanish commercial law requires. Acceptance records for as long as the account exists. Analytics data is aggregated and holds no identifier. Email correspondence for two years. App crash reports for 90 days; a device's notification address until you sign out of the app or remove it.

8. Your rights

You may ask us for access to your data, its rectification or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to privacy@bunnyown.com; we answer within one month. You may also complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es), or the authority of your own country.

Deleting your account. You can delete your account yourself at any time, on the dashboard at dash.bunnyown.com/account/delete or from the BunnyOwn app (Settings → Delete account), after confirming with a code we email you. Your memberships, your sign-in, your connected apps and devices are deleted at once. What you did for a business — replies, notes, decisions — stays in that business's records as “Former member”, because it is the business's record of its own work; logs a business keeps of who opened travellers' identity data keep your address for as long as those logs are kept (art. 17(3)(b) and (e)). If you are the only owner of a workspace, another member must become owner, or you can ask us to close the workspace, which we do within 30 days.

9. Security

Data is encrypted in transit and at rest, isolated per customer, backed up daily, and accessible only to named operators with a need to access it. Sign-in is handled by a dedicated identity provider; we never see your password.

10. Changes to this policy

When this policy changes materially we publish the new version here with its date and email every account holder. Earlier versions stay readable on this page. The English text is the binding version.