Data processing agreement

This agreement covers the guest data RentalBeam processes for you, the host, and is part of our terms of service. You are the controller and RentalBeam is your processor; under California law, you are the business and RentalBeam your service provider. You decide what guest data is collected and why, and make sure you may lawfully collect it and give us these instructions.

Our commitments

• We process guest data only on your instructions: your settings, your booking form and your written requests. If the law requires other processing, we tell you first unless the law forbids it. We tell you at once if we think an instruction breaks data protection law.
• We never sell or share it, use it for anything else, combine it with other data, or use it to train AI. We comply with the CCPA and give guest data the same protection it requires of you, and tell you if we can no longer meet this.
• Only people who need access have it, under confidentiality.
• We keep it secure with measures appropriate to the risk, including encryption, separation from other hosts' data, private storage for uploads and optional two-step sign-in.
• You authorize the providers on our subprocessors page. They are bound by the same obligations, and we stay responsible for them. New ones are posted 30 days ahead, and you may object.
• We help you answer guests' requests, and refer guests who contact us to you.
• We tell you about a breach without undue delay and help you with security, breach notices, impact assessments and consultations with regulators.
• You can delete guest data in your dashboard or ask us for a copy. After you delete your account, it is erased within 30 days, except payment records the law requires us to keep.
• We give you what you need to show compliance and allow audits, including inspections, by you or an auditor you appoint. You may take reasonable steps to check we use guest data as this agreement allows and to stop and fix any use it does not allow.
• Transfers outside the EU or UK use standard contractual clauses, with the UK addendum where needed, or an adequacy decision.

Details

Subject matter, nature and purpose: storing, showing, sending and deleting guest data to run your widgets, dashboard and phone app, including bookings, payments, emails and alerts. Data: guests' names, contact details, booking dates, guest counts, messages, form answers and uploads, payment records and IP addresses. People: your guests and your widgets' visitors. Duration: the life of your account. Questions: info@rentalbeam.com