Privacy Policy

Who we are

BnB Harbour is property-management software for short-term rental hosts, developed by Harboursystems. This policy explains what personal data we process, why, who we share it with, and how you can exercise your rights. In this policy, "we", "us" and "our" mean BnB Harbour.

BnB Harbour is a business tool used by hosts and their organisations. It is not a consumer booking marketplace: guests do not create accounts with us. Guest information reaches BnB Harbour because a host connected their property to a booking channel and asked us to manage those bookings on their behalf.

What data we process

Host account data

Your name, email address, password (stored only as a cryptographic hash, never in readable form), profile picture if you upload one, your role and permissions, your organisation membership, and records of sign-ins and actions you take in the app.

Organisation, property and listing data

Details of your organisation, your properties and listings — addresses, descriptions, photographs, amenities, capacity, availability, pricing and rate rules, fees and taxes. This is largely business data, though a property address may also be a personal address.

Booking and guest data

When a host connects a listing to an online booking channel, we receive and store the reservation details that channel sends us. These typically include:

• the guest’s name, and contact details such as email address or phone number where the channel provides them
• arrival and departure dates, number of guests, and the property booked
• the booking reference and which channel the booking came from
• the booking status and payment status flags reported by the channel

We do not collect or store full payment card numbers. Guest payments are handled by the booking channel, not by BnB Harbour.

Guest access data

For properties with a connected smart lock, we generate time-limited access passcodes for a stay and store the passcode, the period it is valid for, and which booking and lock it belongs to, so that it can be issued to the guest and revoked afterwards.

Smart-lock device data

Device identifiers, model and battery status, lock and unlock records, and related device telemetry. This is retrieved from the cloud service operated by the lock hardware manufacturer, which the host authorises us to connect to.

Technical and operational logs

IP address, browser and device type, timestamps, diagnostic and error information, and an audit record of significant actions taken in the app. We use these to keep the service running, to investigate faults, and to detect abuse.

Mobile app

Our Android app presents the same service as the website. It may ask your permission to show notifications, and to use your camera or photo library when you upload property images. You can refuse or withdraw these permissions in your device settings; the rest of the app continues to work.

How we use this data

• to provide the service — managing properties, listings, availability, pricing and bookings
• to synchronise listings and reservations with the booking channels a host has connected
• to generate, deliver and revoke guest access codes for smart locks
• to send service messages such as booking notifications, reminders and account emails
• to provide support, and to investigate and fix problems you report
• to keep accounts and property access secure, and to detect and prevent abuse
• to meet our legal and accounting obligations

No advertising, no sale of personal data

We do not sell or rent personal data. We do not share it with data brokers, we do not use it for advertising or ad profiling, and we do not embed third-party advertising or ad-tracking software in our apps.

Who we share data with

We share personal data only with service providers that process it on our behalf, under contract, and only on our instructions. By role, these are:

• a channel connectivity provider, which connects listings and reservations to online travel agencies and booking channels
• the cloud service operated by the smart-lock hardware manufacturer, used to issue and revoke access codes and to read device status
• an email delivery provider, used to send account and booking-related messages
• cloud hosting and infrastructure providers, which run our servers, databases and file storage

We may also disclose data where we are legally required to, or where it is necessary to establish or defend legal claims or to protect someone’s safety. If the business is ever sold or reorganised, data may transfer to the acquirer, who would remain bound by this policy.

International transfers

Some of these providers operate outside your country. Where personal data is transferred internationally, we rely on the contractual protections agreed with those providers to keep the data protected to the standard described in this policy.

How long we keep data

• Account data is kept for as long as the account is active.
• Property, listing, booking and guest records are kept while the account is active, because hosts need their reservation history, and afterwards only as long as we are legally required to keep them.
• Smart-lock access passcodes expire at the end of the stay and are revoked at the lock; the record that a code was issued is kept with the booking.
• Technical and operational logs are kept for a limited period and then deleted.

When you ask us to delete data, we delete it unless we are required by law to retain it, in which case we retain only what the law requires and for no longer than it requires.

How we protect data

Traffic between your device and our servers is encrypted in transit. Passwords are stored only as hashes. Access to data inside the product is limited by role-based permissions, and administrative access to our systems is restricted to the people who need it. No system can be guaranteed perfectly secure, but we take these safeguards seriously and review them as the product grows.

Your rights

You can ask us to give you a copy of the personal data we hold about you, to correct it if it is wrong, to delete it, or to restrict or object to how we use it. Where we rely on your consent, you can withdraw it at any time. To make a request, email us at harboursystemske@gmail.com. We will respond within a reasonable period and may need to verify your identity first.

If you are a guest whose booking is managed in BnB Harbour, the host you booked with decides how your data is used, so please contact that host first. If you contact us directly, we will help the host respond.

Children

BnB Harbour is a tool for property businesses and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the product changes. The current version is always published on this page, with its effective date at the top. If a change materially affects how we handle your data, we will tell you in the app or by email.

Contact us

For any privacy question or request, including access, correction or deletion, email BnB Harbour at harboursystemske@gmail.com.