AutoBnB is operated by Gerlich Enterprises LLC (“AutoBnB,” “we,” “us”). This policy explains what we collect when you use our short-term-rental operations platform, how we use it, and the choices you have. It covers both the property owners and managers who are our customers and the guest data those customers bring into the product.
Who this covers
For your own account data, AutoBnB is the controller. For the guest and reservation data you connect from your booking channels and PMS, you are the controller and AutoBnB acts as your processor — we handle that data on your behalf and under your instructions to run your listings.
Information we collect
- Account & workspace: your name, email, sign-in identity (Google OAuth), workspace settings, and role.
- Connected-channel data: when you connect a PMS or channel manager (e.g. Hostaway, Channex) or OTAs (Airbnb, Vrbo, Booking.com), we import listings, calendars, reservations, pricing, and guest messages.
- Guest data: guest names, contact details, messages, and booking/economics tied to reservations on your listings.
- Operations data: cleaning/turnover schedules (Turno), smart-lock devices and access codes (Seam), and thermostat state (Ecobee).
- Financial data: subscription billing details processed by Stripe, and — where you enable per-property banking — account, card, balance, and transaction data via Stripe Treasury/Issuing.
- Utility-provider credentials: if you enable utility auto-pay, the login credentials you provide for your utility accounts, stored encrypted (see the callout below).
- Product & device data: log data, IP address, and basic usage/diagnostics, plus error and analytics events (Sentry, PostHog).
How we use information
- To operate the product — sync your listings, draft and (once you allow it) send guest messages, issue access codes, run climate schedules, coordinate cleans, and pay bills you authorize.
- To provide our AI features. AI actions are approval-gated by default: nothing is sent to a guest and no money moves until you approve it or explicitly switch that action to automatic.
- To bill your subscription, provide support, secure the service, prevent abuse, and meet legal obligations.
We do not sell your personal information, and we do not use guest data for advertising. We do not use your or your guests’ content to train foundation models.
How we share information
We share data with the subprocessors that make the product work — hosting, database, AI, payments/banking, and the integrations you connect. See our Subprocessors list for the current set, what each handles, and where it’s located. We also share information when required by law, to protect rights and safety, or as part of a business transfer. Every subprocessor is bound by contract to protect the data and use it only to provide their service to us.
Data retention
We keep account and workspace data while your account is active. Connected-channel and guest data is retained until you disconnect the source or delete it, or until your workspace or account is deleted. On account deletion we delete or de-identify your data within 30 days, except where we must retain records for legal, tax, accounting, or security purposes (for example, payment records).
Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these in-product or by emailing privacy@autobnb.space. Because guests’ data is controlled by the host whose listing they booked, guest requests are routed to that host; we assist as processor.
Security
Data is encrypted in transit (TLS 1.2+) and at rest. Sensitive secrets — including utility credentials and integration tokens — are encrypted with application-layer authenticated encryption. Access is scoped per workspace and enforced in the data layer. We use Google OAuth for sign-in and never store your Google password. See our practices summarized across this policy; report a vulnerability to security@autobnb.space.
Cookies
We use strictly-necessary cookies for authentication and a small set of first-party analytics to understand product usage. We do not use third-party advertising cookies.
Children
AutoBnB is a business tool not directed to children, and we do not knowingly collect data from anyone under 18.
International transfers
We operate in the United States and our subprocessors are US-based. If you access the service from outside the US, you understand your data is processed in the US under this policy.
Changes to this policy
We may update this policy; we’ll revise the “last updated” date and, for material changes, give notice in-product or by email.
Contact
Gerlich Enterprises LLC — privacy questions and data requests: privacy@autobnb.space. General support: support@autobnb.space.