Legal document

Privacy Policy

Last updated: May 6, 2026

This policy is provided for GDPR and CCPA readiness. Have it reviewed by a qualified legal professional for your jurisdiction before going live.

01

Introduction

AirRanks is committed to protecting your personal data. This policy explains what data we collect, how we use it, and what your rights are.

02

Data we collect

Account data

  • Email address, provided at sign-up
  • First name, optional
  • Password, stored as a hashed value and never in plain text

Usage data

  • Airbnb listing IDs you enter yourself
  • Your scan history and associated results
  • Credit balance and transaction records
  • Telegram ID, if you link your account

Technical data

  • IP address at login
  • Timestamps of logins and key actions
03

How we use your data

Your data is used exclusively to:

  • Deliver the Service, including running scans and displaying results
  • Manage your account and credits
  • Contact you in the event of a technical or security issue
  • Improve Service performance, using anonymized data only
04

Data sharing

We do not sell, rent, or share your personal data with third parties, except:

  • Stripe, for payment processing and subject to their own privacy policy
  • Server hosting through Hostinger, for infrastructure only
05

Data retention

Your data is kept for as long as your account is active. If you delete your account, your personal data is erased within 30 days. Financial records are retained for 7 years for accounting obligations.

06

Your rights

Under GDPR, if you are in the European Union, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request erasure, also known as the right to be forgotten
  • Data portability
  • Object to processing

To exercise these rights:

07

Cookies

AirRanks uses only cookies that are strictly necessary for the Service to function, including the authentication session cookie. No advertising or third-party tracking cookies are set.

08

Security

Your data is stored on secured servers. All connections are encrypted via HTTPS. Passwords are hashed with bcrypt.

09