This policy explains how Eratez handles personal data when you use eratez.com and the Eratez service. We process personal data under Regulation (EU) 2016/679 (GDPR) and Czech data protection law.
Controller: Eratez, Czech Republic. For anything related to your personal data, contact hello@eratez.com.
1. What we collect
Account data
Your name, email address, and a hashed password (we never see the password itself), plus the language and settings you choose. You provide it when you register, and without it we cannot create your account.
Property and competitor configuration
The property you register, the competitor listings you select, and the tracking settings you make. This is business data about accommodation listings, but it is stored under your account.
Billing data
Subscriptions are processed by Stripe. Stripe holds your card details; we receive only the subscription status, your billing country, and invoice records we are legally required to keep.
Technical data
Server logs (IP address, browser, timestamps) kept for security and debugging, and the emails you exchange with our support.
We do not collect personal data about your guests, and the rate data we track relates to publicly listed accommodation prices, not to individuals.
2. Why we process it
- To provide the service: account management, rate tracking, report preparation and delivery (Article 6(1)(b) GDPR, performance of a contract).
- To bill you: subscription management and tax records (Article 6(1)(b) and 6(1)(c), legal obligations under Czech accounting law).
- To keep the platform secure: logs, abuse prevention, rate limiting (Article 6(1)(f), legitimate interest).
- To answer your messages: support and contact requests (Article 6(1)(b) or 6(1)(f)).
We do not sell personal data, we do not run third-party advertising, and we do not make automated decisions with legal effects about you.
3. Who processes data for us
We use a small number of processors to run the service:
- Supabase: database, authentication, and file storage for the application.
- Stripe: payment processing and subscription billing.
- Our hosting and email delivery providers: running the website and sending transactional email (report deliveries, password resets).
Where a provider processes data outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. A current list of processors is available on request.
4. How long we keep it
- Account and configuration data: for the life of your account, deleted within 30 days of account deletion.
- Invoices and tax records: 10 years, as required by Czech law.
- Server logs: up to 90 days.
- Support correspondence: up to 2 years after the conversation closes.
5. Your rights
Under the GDPR you can ask us at any time to:
- access the personal data we hold about you and receive a copy (portability);
- correct inaccurate data;
- delete your data ("right to be forgotten");
- restrict or object to processing based on legitimate interest.
Email hello@eratez.com and we will respond within one month. You can also delete most account data yourself from the dashboard settings.
If you believe we handle your data unlawfully, you have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or with the authority in your own EU member state.
6. Cookies
Eratez uses only functional cookies and local storage. There are no advertising or third-party analytics trackers. Details are in the cookie policy.
7. Changes
If we change this policy in a way that affects you, we will let you know by email or in the app before the change applies. The date at the top always reflects the latest version.