Privacy Policy

Last updated: November 7, 2026

1. Who we are

RentAbot (rentabot.top) operates as a Data Processor providing booking management software via Telegram bots. The businesses that subscribe to RentAbot are the Data Controllers responsible for the personal data of their clients (Data Subjects).

2. Data we collect

Client data: Telegram user ID, name, username, phone number (if provided), birthday (if provided), booking history, chat messages.
Business account data: Name, email address, timezone, payment information.
Technical data: IP addresses, usage logs, AI interaction tokens.

3. Why we process data

To operate the booking management service on behalf of subscribing businesses.
To provide AI-assisted responses via Gemini AI.
To send booking confirmations, reminders, and notifications.
To comply with legal obligations.

4. Sub-processors

We rely on the following sub-processors to deliver our service:

Google LLC (Gemini AI) — AI-powered chat responses. Data may be processed in the United States under Google's Data Processing Addendum.
Google LLC (Google Calendar API) — Two-way calendar synchronisation for businesses that choose to connect Google Calendar. See section 5 below.
Telegram Messenger Inc. — Messaging infrastructure for bot interactions.
Hosting provider — Infrastructure and data storage (EU/EEA where applicable).

5. Google user data (Google Calendar)

If a subscribing business chooses to connect its Google Calendar, RentAbot accesses that account's Google Calendar through Google's API — solely to provide two-way calendar synchronisation for bookings. This uses the https://www.googleapis.com/auth/calendar scope and only after the account owner grants consent on Google's OAuth screen.

How we access and use Google Calendar data:

Read — we read your calendars' busy/free times and existing events so that periods when you are already busy are blocked, and clients cannot book over them.
Write — we create, update and delete calendar events that correspond to bookings made through RentAbot, and keep them in sync when a booking's status changes.
Sync back — we periodically read changes you make in Google Calendar (such as moving or deleting an event) so the matching booking is rescheduled or cancelled in RentAbot.

What we store: we store the OAuth access and refresh tokens required to maintain the connection, and identifiers that map your bookings to their corresponding Google Calendar events. We do not store the full contents of your calendar.

What we do not do: we do not sell Google user data; we do not use it for advertising; we do not use it to train artificial-intelligence or machine-learning models; and we do not transfer it to others except as necessary to provide the synchronisation feature at your direction, to comply with applicable law, or as part of a merger or acquisition as permitted by Google's policies.

Your control: you can disconnect Google Calendar at any time from your RentAbot settings, or revoke access directly in your Google Account permissions. When you disconnect, we delete the stored OAuth tokens; events already written to your calendar remain under your control in Google Calendar.

Limited Use disclosure: RentAbot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Retention periods

Chat messages: Anonymised after 2 years.
AI usage logs: Deleted after 90 days.
Erased client records: Permanently deleted 30 days after GDPR erasure request.
Cancelled booking notes: Nulled after 1 year.

7. Your rights

Under GDPR, Data Subjects have the right to:

Access — request a copy of your personal data.
Rectification — request correction of inaccurate data.
Erasure ("right to be forgotten") — request deletion of your personal data.
Restriction — request limited processing of your data.
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact the business whose bot you use, or contact us at: [email protected]

8. Data Protection Officer (DPO)

For DPO inquiries, please contact: [email protected]

9. Supervisory authority

You have the right to lodge a complaint with your local data protection supervisory authority.