Privacy Policy

1. Who we are

Qontaktly operates the platform available at qontaktly.com, including the dashboard, the direct booking engine, the unified inbox, the AI concierge, and review management. For the operator account data described below, Qontaktly is the data controller. You can reach us at hello@qontaktly.com.

2. Data we collect from operators

When you create and use a Qontaktly account, we collect:

• Account details: your name, email address, phone number, and login credentials. Passwords are stored only as secure hashes by our authentication provider; we never see them in plain text.
• Property details: property name, address, room and rate configuration, photos, policies, and the content you publish to your booking page.
• Billing details: your subscription plan, invoices, and payment history. Card numbers are collected and stored by our payment processor, not by Qontaktly.
• Usage data: pages visited, features used, device and browser information, and approximate location derived from IP address. We use this to improve the product and to keep accounts secure.
• Support communications: messages you send us by email or chat when you ask for help.

3. Guest data we process on behalf of properties

When guests book, message, or stay at a property that uses Qontaktly, the property collects guest information through our platform. For this data the property is the data controller and Qontaktly is a data processor acting on the property's documented instructions. Guest data handled this way can include:

• Booking details: guest name, contact details, stay dates, room type, party size, and special requests.
• Messages: the content of WhatsApp, email, and web chat conversations between the guest and the property, processed so the property can reply from one inbox and so the AI concierge can draft responses.
• Payment status: whether a booking has been paid, refunded, or is outstanding. Guest card details are handled by the property's payment gateway, not stored by Qontaktly.
• Reviews: review content guests publish on travel sites, aggregated so the property can read and respond in one place.

Guests who want to access, correct, or delete their data should contact the property they stayed with. We give properties the tools to honour those requests, and we assist when they ask.

4. Cookies and analytics

We use a small number of cookies that are necessary to keep you signed in and to protect your session. We also use PostHog, a product analytics service, to understand how the platform is used; this includes events such as page views and feature interactions. We do not run advertising trackers and we do not sell personal data to anyone.

5. Payments

Subscription payments for Qontaktly are processed by Stripe. Stripe receives your payment details directly and handles them under its own privacy policy; Qontaktly only sees the result of the transaction and a reference to your payment method, never the full card number. Payments that guests make to a property are processed by the payment gateway the property has connected, under that gateway's terms.

6. How we use data

• To provide the service: sync availability and rates with travel sites, deliver bookings, route messages, and generate AI suggested replies.
• To bill you and manage your subscription.
• To secure the platform: detect abuse, enforce rate limits, and investigate incidents.
• To improve the product, using aggregated usage analytics.
• To communicate with you about your account, including service notices and, where you have not opted out, product updates.

We do not use guest message content to train AI models for other customers. AI features process conversation content only to serve the property the conversation belongs to.

7. Who we share data with

We share personal data only with service providers that help us run the platform, and only to the extent needed. These subprocessors fall into the following categories: cloud hosting and database infrastructure, email and messaging delivery, payment processing, and product analytics. Each is bound by a data processing agreement. A current list of subprocessor categories is available on request at hello@qontaktly.com.

We may also disclose data where the law requires it, to protect the rights and safety of our users, or as part of a corporate transaction such as a merger, in which case this policy continues to apply to the data transferred.

8. International transfers

Qontaktly serves properties around the world, and our infrastructure providers may store or process data in other countries. Where data crosses borders we rely on appropriate safeguards, such as standard contractual clauses with our providers, and we require an equivalent standard of protection wherever the data sits.

9. Data retention

We keep operator account data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations. Guest data processed on behalf of a property is retained according to the property's configuration and instructions; when a property deletes a record or closes its account, we delete the associated data within our deletion cycle, except where the law requires us to keep it longer. Backups are purged on a rolling schedule.

10. Security

We encrypt data in transit and at rest, isolate each property's data with row level access controls, offer two factor authentication for operator accounts, keep audit logs of sensitive actions, and restrict internal access to production data to the staff who need it. No system is perfectly secure; if we learn of a breach that affects your data, we will notify you without undue delay and tell you what we know and what we are doing about it.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to complain to a supervisory authority. Operators can exercise these rights by emailing hello@qontaktly.com from the address on the account. Guests should contact the property they booked with, which controls their data; we will support the property in responding.

12. Children

Qontaktly is a business tool and is not directed at children. You must be at least 18 years old to hold an operator account. Guest records may include minors travelling with their families; that data is controlled by the property and handled under this policy's processor terms.

13. Changes to this policy

We may update this policy as the product and the law evolve. If we make a material change, we will notify account holders by email or through the dashboard before it takes effect. The effective date at the top of this page always reflects the latest version.

14. Contact and governing law

Questions, requests, and complaints can be sent to hello@qontaktly.com. This policy is governed by the laws of the State of Delaware, United States.