Privacy Policy

This Privacy Policy explains how rowbo.dev (operated by Tom Rowbotham & Phoebe Tan, London, United Kingdom) collects and uses personal data. We act as the data controller for the personal data described here. We aim to comply with the UK GDPR and the Data Protection Act 2018.

1. Data we collect

• Account & contact data — your name and email address, and any details you send us when you get in touch or buy a plan.
• Payment data — payments are processed by Stripe. We do not store your full card details; we receive only limited confirmation and billing information (such as the fact of payment and subscription status) needed to run your account.
• Public Airbnb listing data — to build a preview, we collect information that is publicly available on a host’s Airbnb profile and listings (such as listing titles, descriptions, photos and the host’s public display name). We use this solely to generate the preview site that demonstrates what we can build.
• Basic technical data — standard information generated when a site or preview is served (for example via our hosting provider), used to operate and secure the service.

2. Lawful basis

We rely on the following lawful bases under UK GDPR:

• Contract — to set up, host and support your site and to take payment once you purchase a plan.
• Legitimate interests — to build previews from publicly available listing information in order to show hosts what a dedicated site could look like, and to run and improve our business. You can object to this at any time (see rights below), and you can have a preview removed via our preview removal page.
• Legal obligation — to keep records we are required by law to keep (for example for tax and accounting).

3. Sub-processors

We share personal data with the following service providers who process it on our behalf:

• Stripe — payment processing.
• Supabase — database (hosted in the EU, eu-central-1).
• Resend — transactional and notification email.
• Vercel — website hosting and delivery.
• Apify — collection of public Airbnb listing data used to build previews.

Each provider is bound to handle data in line with applicable data-protection law. Where data is transferred outside the UK/EEA, appropriate safeguards (such as standard contractual clauses) apply.

4. Your rights

Subject to the conditions in UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased. If you want a preview site built from your public listings removed, you can request that directly on our preview removal page — we’ll take it down and won’t rebuild it.
• Restrict or object to processing, including processing based on legitimate interests.
• Request portability of data you provided to us.
• Withdraw consent where we rely on it, and to lodge a complaint with the UK Information Commissioner’s Office (ICO).

To exercise any of these rights, email tom@rowbo.dev.

5. Retention

We keep account and site data for as long as your account is active. If you cancel or a preview is declined, we retain the associated data for up to 30 days and then delete it, except where we are required to keep certain records for longer (for example billing records needed for tax and accounting).

6. Contact

For any privacy question or request, contact us at tom@rowbo.dev.