Privacy Policy
Last updated: March 4, 2026
This Privacy Policy describes how AirAnalyze (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our website and services.
1. Information We Collect
Information you provide
- Email address — when you submit a listing for analysis or sign in to access your reports
- Airbnb listing URL — the listing you choose to analyze
Information collected automatically
- IP address — used for rate limiting and abuse prevention, stored for up to 30 days
- Basic usage data — pages visited, features used, timestamps
Information we do NOT collect
- We do not collect passwords (authentication is passwordless via email magic links)
- We do not access your Airbnb account or credentials
- We do not collect or store payment card details (payments are handled entirely by LemonSqueezy)
2. How We Use Your Information
- Email address — to deliver analysis results, send login links, and communicate about purchases
- Listing URL — to retrieve publicly available listing data and generate your analysis
- IP address — solely for rate limiting to prevent abuse
- Usage data — to improve our service and fix technical issues
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Legal Basis for Processing (GDPR)
- Contract performance (Article 6(1)(b)) — processing your email and listing URL is necessary to provide the analysis service you requested
- Legitimate interest (Article 6(1)(f)) — collecting IP addresses for rate limiting and abuse prevention
- Consent (Article 6(1)(a)) — where applicable, such as optional communications
4. Third-Party Service Providers
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | EU (Frankfurt) |
| LemonSqueezy | Payment processing (Merchant of Record) | United States |
| Anthropic | AI analysis engine | United States |
| Vercel | Website hosting | Global |
5. Data Retention
- Analysis results — retained so you can access your reports
- Email addresses — retained as long as your account exists
- IP addresses — retained for up to 30 days, then deleted
- Payment records — retained as required by tax and accounting regulations
You may request deletion of your data at any time (see Section 7).
6. Data Security
- All data is transmitted over encrypted connections (HTTPS/TLS)
- Database access is restricted and authenticated
- Payment data is handled exclusively by LemonSqueezy's PCI-compliant infrastructure
- We do not store passwords
7. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restriction — request that we limit processing of your data
- Portability — request your data in a machine-readable format
- Objection — object to processing based on legitimate interest
To exercise any of these rights, contact us at boraboytorun2005@gmail.com. We will respond within 30 days.
8. International Data Transfers
Some of our service providers are located outside the European Economic Area. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms as required by GDPR.
9. Cookies
Our service uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
10. Children
Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.
12. Contact
For privacy-related inquiries or to exercise your data rights:
Email: boraboytorun2005@gmail.com