Privacy Policy

1. Introduction

Selecta ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you use stayselecta.com (the "Platform").

2. Information We Collect

Account information: When you create an account, we collect your name, email address, phone number, and profile photo.

Booking information: When you make a reservation, we collect check-in/out dates, number of guests, special requests, and payment details.

Payment information: Payment card details are processed securely by Stripe or MercadoPago. We do not store full card numbers on our servers.

Communications: Messages between guests and hosts sent through the Platform.

Usage data: Pages visited, search queries, device information, IP address, and browser type, collected automatically through cookies and similar technologies.

3. How We Use Your Information

• To process bookings and payments
• To facilitate communication between guests and hosts
• To send booking confirmations and important updates
• To improve the Platform and our curation process
• To prevent fraud and ensure security
• To comply with legal obligations

We do not sell your personal data to third parties.

4. Data Sharing

We share your information only when necessary:

• With hosts: Your name, contact details, and booking info are shared with the host of your reserved property.
• Payment processors: Stripe and MercadoPago process your payment data under their own privacy policies.
• Service providers: We use Supabase (database/auth), Vercel (hosting), and Anthropic (AI analysis) to operate the Platform. These providers process data on our behalf.
• Legal requirements: When required by law, regulation, or legal process.

5. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Row-Level Security (RLS) on all database tables
• Secure, httpOnly authentication tokens
• Rate limiting on sensitive endpoints
• Input sanitization to prevent injection attacks
• Payment data handled exclusively by PCI-compliant processors

6. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand how the Platform is used. You can control cookie preferences in your browser settings.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@stayselecta.com.

8. Data Retention

We retain account data for as long as your account is active. Booking records are kept for 5 years for legal and accounting purposes. You can request account deletion at any time, after which personal data will be removed within 30 days, except where retention is required by law.

9. International Transfers

Your data may be processed in servers located outside Argentina (Vercel infrastructure). We ensure adequate protection measures are in place for any international transfers in compliance with Argentine data protection law (Ley 25.326).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Platform constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, contact our team at privacy@stayselecta.com.