Privacy Policy

1. Data controller

Appit AS is the data controller for the personal data collected through Gjestfri.

Org. no.: 933 898 210
Address: Kokstadveien 41, 5257 Kokstad, Norway
Email: trond@appit.ai
Phone: +47 900 79 800

2. What personal data do we collect?

Account information

Name, email address, phone number, and password. Collected when you create an account.

Property data

Address, photos, descriptions, rates, and availability for your rental units.

Guest data

Name, contact details, and message history for guests who book through the platform.

Booking data

Dates, rates, channel source, and status for bookings synced through Channex or created directly.

Payment data

Payment transactions are handled by Stripe. We do not store card details. We have access to transaction history and payout status through Stripe Connect.

Communication data

Messages between you and your guests, as well as messages between you and Gjestfri customer support.

Usage data and analytics

Anonymized statistics about how you use the platform, including page views, clicks, and feature usage. Used to improve the service.

3. Legal basis

We process personal data on the following legal bases:

4. Sharing with third parties

We share personal data with the following third parties acting as data processors:

• Channex - channel management and booking sync with Airbnb, Booking.com, and other platforms
• Stripe - payment processing and payouts
• Hosting provider - secure data storage and platform operations
• AI services - to generate price suggestions, texts, and recommendations (data is anonymized where possible)

We never sell your personal data to third parties. Data processors only have access to the data necessary to perform their tasks, governed by data processing agreements.

5. Data retention

We keep personal data only for as long as necessary for the purpose it was collected for:

• Account data: For as long as you have an active account, plus up to 30 days after deletion
• Booking data: For 5 years after the booking, as required by the Norwegian Accounting Act
• Payment data: For 5 years after the transaction, as required by the Norwegian Accounting Act
• Usage data: For up to 26 months, then anonymized

6. Your rights

Under the Norwegian Personal Data Act and the GDPR, you have the following rights:

• Access: You can ask to see what personal data we hold about you
• Rectification: You can ask us to correct inaccurate data
• Erasure: You can ask us to delete your personal data
• Data portability: You can ask to receive your data in a machine-readable format
• Restriction: You can ask us to restrict processing in certain cases
• Objection: You can object to processing based on legitimate interest

To exercise your rights, contact us at trond@appit.ai. We respond within 30 days.

If you believe we process personal data in breach of the rules, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

7. Cookies

We use cookies to make sure the platform works properly and to improve your experience. Read more in our cookie policy.

8. Changes

We may update this policy. For material changes, we will notify you by email or in the platform.