Privacy

Your data, explained.

Last updated: 25 September 2026

This Privacy Policy explains how Airtodos processes personal data when you visit our website, join the notification list, manage an apartment or use a guest guide.

Who is responsible?

Airtodos is operated by KONUS, Römerstraße 46, 6103 Reith bei Seefeld, Austria. We are responsible for our website, host accounts, service security and Founding Host communications. Contact support@airtodos.com for privacy requests. See our Imprint for operator details.

Hosts are responsible for the accommodation and guest information they choose to manage through Airtodos and for their own communications with guests. For processing we carry out on a host’s behalf, the applicable data-processing arrangements define the parties’ responsibilities.

What we process

• Host and team accounts: email address, name, preferred first name, profile details, authentication information, invitations, organisation and apartment access rights, and — only if you enter it — a postal address for contracts and invoices.
• Guide content: apartment addresses, photos, contact details, stay information, recommendations and notes provided by hosts. Published content is visible to people who can access the guide.
• Stay features: a host’s stay label and dates, a random access token or guest code, saved favourites and optional ratings and review text. Stay labels are for the host; public reviews do not display those labels.
• Launch notifications: your email address when you explicitly ask to hear when Airtodos becomes available.
• Technical information: request and security information, such as IP addresses in service logs, browser information and aggregated usage events needed to operate and improve the service.

Purposes and legal bases

We use account and guide data to provide the service and fulfil our contract with hosts (Article 6(1)(b) GDPR). We process necessary security, abuse-prevention and service-improvement data on the basis of our legitimate interests (Article 6(1)(f)). Launch emails are based on your consent (Article 6(1)(a)); you can withdraw it at any time. We may also retain information where required by a legal obligation (Article 6(1)(c)). Where a host controls guest data, the host is responsible for the legal basis for that processing.

The notification list

When you join the list, your email address is stored with Brevo for the requested notification about the Founding Host offer. This does not subscribe you to a general newsletter, reserve a Founding Host place or create a paid subscription. You can unsubscribe through an email’s unsubscribe link or by contacting us. Opening a guest guide or leaving a review does not give consent to marketing.

Service providers

Airtodos uses Vercel for hosting and uploaded media storage; Neon for its database and authentication; Brevo for launch notifications and transactional email; Google Places for place search, information and photos; and our Umami installation at analytics.konus.at for usage analytics. Providers receive the information needed for the functions they perform. Following an external map, website or booking-platform link opens that provider’s service under its own privacy terms.

Paid plans are processed by Stripe. For subscriptions, Stripe acts as the seller (merchant of record): it receives your name, email address, billing address, VAT ID if you provide one, and payment details, calculates and collects VAT, and issues receipts and invoices. Airtodos never sees or stores your card details; with your account we store only a reference to your Stripe customer and subscription, so we know which plan is active. Stripe processes this data under its own privacy policy (stripe.com/privacy).

Cookies, favourites and analytics

Authentication cookies keep hosts signed in. A guest who uses a stay link or code receives a cookie recognising that stay; it can remain in the browser for up to 400 days, while the stay’s actual access can expire sooner or be revoked by the host. Favourites may be stored in your browser or associated with a recognised stay. Browser storage can be cleared using your browser settings.

Umami provides aggregated usage analytics without advertising cookies. We do not add names, emails, review text or free-text search queries to analytics events. Authentication routes are excluded from our analytics script and query strings are not collected. Necessary hosting and security logs are separate from analytics.

Where data is processed

Our providers may process data in different countries, including outside the EU or EEA. International transfers are subject to the safeguards required by the GDPR, such as an applicable adequacy decision or standard contractual clauses. Contact us for information about the arrangements applicable to your data.

How long data is kept

We retain account and guide data for the operation of your account and published guides. Stay records and reviews may remain after a stay ends; revoking a stay’s access does not itself delete its reviews. Notification-list data is used for the requested Founding Host communication until you unsubscribe or it is no longer needed for that purpose. Retention also takes account of security investigations, legal obligations and the establishment or defence of legal claims. Contact us to request deletion or ask about a specific record.

Your rights

Subject to applicable law, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You can withdraw consent without affecting the lawfulness of earlier processing. Email support@airtodos.com to exercise your rights. For records controlled by your accommodation host, you can also contact that host.

You can lodge a complaint with a data protection authority, including the Austrian Data Protection Authority. The European Commission explains your GDPR rights in more detail.

Updates and questions

We update this policy as the service develops and show the revision date above. For questions about this policy or data-processing arrangements for your organisation, contact support@airtodos.com.