Privacy Policy

Last updated: July 1, 2026

1. Who we are

RentAbot (rentabot.top) operates as a Data Processor providing booking management software via Telegram bots. The businesses that subscribe to RentAbot are the Data Controllers responsible for the personal data of their clients (Data Subjects).

2. Data we collect

Client data: Telegram user ID, name, username, phone number (if provided), birthday (if provided), booking history, chat messages.
Business account data: Name, email address, timezone, payment information.
Technical data: IP addresses, usage logs, AI interaction tokens.

3. Why we process data

To operate the booking management service on behalf of subscribing businesses.
To provide AI-assisted responses via Gemini AI.
To send booking confirmations, reminders, and notifications.
To comply with legal obligations.

4. Sub-processors

We rely on the following sub-processors to deliver our service:

Google LLC (Gemini AI) — AI-powered chat responses. Data may be processed in the United States under Google's Data Processing Addendum.
Telegram Messenger Inc. — Messaging infrastructure for bot interactions.
Hosting provider — Infrastructure and data storage (EU/EEA where applicable).

5. Retention periods

Chat messages: Anonymised after 2 years.
AI usage logs: Deleted after 90 days.
Erased client records: Permanently deleted 30 days after GDPR erasure request.
Cancelled booking notes: Nulled after 1 year.

6. Your rights

Under GDPR, Data Subjects have the right to:

Access — request a copy of your personal data.
Rectification — request correction of inaccurate data.
Erasure ("right to be forgotten") — request deletion of your personal data.
Restriction — request limited processing of your data.
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact the business whose bot you use, or contact us at: [email protected]

7. Data Protection Officer (DPO)

For DPO inquiries, please contact: [email protected]

8. Supervisory authority

You have the right to lodge a complaint with your local data protection supervisory authority.