Privacy Policy

Last updated: May 18, 2026

Areca is committed to protecting your privacy. We collect only what we need to provide the service, we do not sell your data, and we do not use advertising trackers or social media pixels on our website.

This policy explains what data we collect, how we use it, and what rights you have over it.

Who we are

The data controller for Areca is Kinga Pomykała, operating Areca at arecabooking.com. You can reach us at [email protected].

What information we collect

As a visitor (no account)

• No personal information is collected.
• No information is sold or rented to third parties.
• No information is shared with advertising companies.
• No behavioral tracking or profiling takes place.
• We use privacy-friendly analytics (see sub-processors below) that do not identify individual visitors.

As a registered user (with account)

• Email address — required to create an account, used for login, invoices, and essential service communications.
• Property information — name, address, room or unit count, and other details you provide when setting up your property in Areca.
• Billing information — handled by our payment processor Paddle. We do not store your payment card details. See Paddle's privacy policy for details.
• IP address — processed to prevent abuse and unauthorized access.
• Usage data — information about how you use the Service, such as features accessed and actions taken, used to maintain and improve the platform.

Guest data you enter into Areca

When you use Areca to manage your property, you may input personal data about your guests (names, email addresses, ID numbers, dates of birth, nationalities, booking details, and similar). This data belongs to you. Areca processes it only as your data processor, in accordance with your instructions and as necessary to deliver the Service.

You are responsible for ensuring that guest data is collected and processed in accordance with applicable data protection laws, including obtaining any necessary consents from guests and responding to their requests under those laws.

How we use your data

We use the information we collect to:

• Operate and maintain your Areca account and property setup.
• Process payments and issue invoices.
• Send essential service communications (account updates, security alerts, billing notices).
• Provide customer support.
• Improve and develop the Service based on how it is used.
• Prevent abuse, fraud, and unauthorized access.

We do not use your data for advertising, and we do not share it with advertising networks.

We may send you product updates or feature announcements by email. You can unsubscribe from these at any time using the link in any such email or by contacting us at [email protected].

Legal basis for processing (EU/UK users)

For users in the European Economic Area and the United Kingdom, our legal bases for processing personal data are:

• Contract performance — processing necessary to provide the Service you have subscribed to.
• Legitimate interests — processing necessary for fraud prevention, security, and service improvement, where these interests are not overridden by your rights.
• Legal obligation — processing required to comply with applicable law, such as retaining billing records.
• Consent — where you have explicitly opted in, such as for non-essential communications.

Where your data is stored

Your data is stored on servers operated by our infrastructure sub-processors within the European Union. Details are listed in the sub-processors section below.

Sub-processors

We work with the following third-party service providers who may process personal data on our behalf. All are contractually bound to process data only according to our instructions and in compliance with applicable data protection law.

We will update this list if we add or change sub-processors and will notify you of material changes.

Data retention

We retain your account data for as long as your account is active or as needed to provide the Service.

If you cancel your account, you may request an export of your data within 30 days. After that period, we will delete your account data from our systems, except where retention is required by law (for example, accounting records).

Guest data you have entered into Areca is retained as part of your account data under the same conditions. You may request deletion of specific records at any time through the Service or by contacting us.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may ask you to verify your identity before acting on your request.

If you are located in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Cookies

Areca uses only essential cookies required for the Service to function, such as session authentication cookies. We do not use advertising cookies, social media tracking pixels, or third-party retargeting scripts.

Our analytics provider (Plausible) does not use cookies and does not collect personally identifiable information.

Children's privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Third-party links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal data with them.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice in the Service before the change takes effect, and we will update the "Last modified" date at the top of this page.

Contact

If you have questions, requests, or concerns about this Privacy Policy, please contact us at [email protected].