Privacy policy

Book Me A Pillow (“we”) is a booking-management app for small guesthouses and hotels, available at app.bookmeapillow.com. This policy explains what personal data the app handles, why, and what your rights are.

Signing in with Google

Staff sign in with their Google account. Only people whose email address an administrator has added can sign in. When you sign in, Google shares with us your name, email address and profile picture (the standard “openid”, “email” and “profile” permissions). We use them only to identify you, let you into the organizations you belong to, and show who you are in the app. We do not request access to your Gmail, Drive, Calendar or any other Google data.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Booking data

Staff of each property enter reservations, which may include guests’ names, email addresses, phone numbers, comments and other details the property chooses to record. This data belongs to the property: the property decides what is recorded and is responsible for it, and we process it only to provide the app to that property. Guests who want to access or delete their data should contact the property directly; we will help the property respond.

What we don’t do

• We don’t sell or rent personal data, and don’t use it for advertising.
• We don’t use analytics or tracking tools, and don’t send marketing email.
• We don’t use personal data to train AI models.

Cookies

We use only the cookies needed for the app to work: a sign-in session cookie and a cookie that remembers your chosen language.

Where data is stored, and who helps us

• Vercel hosts the app; our servers run in the EU (Frankfurt).
• Neon hosts the database in the EU (Frankfurt).
• Google provides sign-in.

These providers process data on our behalf under their data processing terms. Data is sent over encrypted connections.

How long we keep data

Your account data is kept while you are a member of an organization in the app; an administrator can remove you at any time, and you can ask us to delete your account entirely. Booking data is kept for as long as the property uses the app, or until the property deletes it.

Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, or object to its processing. You can also complain to your data protection authority (in Estonia: the Data Protection Inspectorate, Andmekaitse Inspektsioon).

Contact

Questions or requests: andrus@palts.com.