1. Who we are
GetGuestHub is operated by AANDSTAD UTVIKLING AS ("we", "us"), trading as GetGuestHub. We act as the data controller for personal data processed through getguesthub.com and our guest guide experience. Contact: Hello@getguesthub.com.
2. Data we collect
- Account data (hosts): email, name, and authentication identifiers via Google or email/password.
- Rental content: information you enter about your rental (address, WiFi, house rules, contact details).
- Billing data: for paid subscriptions, name, email, billing address, country, and tax identifiers are collected and processed by Paddle (see section 4).
- Approximate location: if you allow it, we use your device location to show nearby places. We do not store guest location.
- Technical data: minimal logs for security and debugging (IP, browser, errors).
3. How we use data and legal basis
- Provide the service (account creation, rendering guest guides) — legal basis: performance of a contract.
- Payments and invoicing — legal basis: performance of a contract and legal obligation.
- Security, fraud prevention, and debugging — legal basis: legitimate interests in keeping the service safe.
- Nearby places and weather via Google Maps Platform — legal basis: consent (device location) and legitimate interests.
- Customer support and service emails — legal basis: performance of a contract and legitimate interests.
We do not sell personal data and we do not use it for advertising.
4. Sharing and sub-processors
We share data only with providers necessary to run the service:
- Paddle.com Market Limited ("Paddle") — our Merchant of Record and payments provider. Paddle processes all orders, subscriptions, billing, tax, invoicing, refunds and related customer service, and acts as an independent controller for that data. See Paddle's privacy notice.
- Hosting and database provider for application hosting and storage.
- Google Maps Platform for place search and weather.
- OAuth providers (e.g. Google) when you sign in.
- Professional advisers and authorities where required by law.
5. Retention
Account and rental data is kept while your account is active and deleted or anonymised when no longer needed. Billing records held by Paddle are retained per Paddle's policy and applicable tax law. You can request deletion at any time by contacting us.
6. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), encryption at rest for our database, access controls and least- privilege for administrative access, authenticated APIs with row- level security, and regular software updates. No system is perfectly secure, but we work to keep risk low.
7. International transfers
Some of our providers may process data outside the EU/EEA. Where that happens we rely on appropriate safeguards such as EU Standard Contractual Clauses or adequacy decisions.
8. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, or object to processing, and you may withdraw consent at any time. You also have the right to complain to your local supervisory authority. Contact us at the email below and we will respond within one month.