Privacy Policy

Last updated: March 4, 2026

This Privacy Policy describes how AirAnalyze (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our website and services.

1. Information We Collect

Information you provide

  • Email address — when you submit a listing for analysis or sign in to access your reports
  • Airbnb listing URL — the listing you choose to analyze

Information collected automatically

  • IP address — used for rate limiting and abuse prevention, stored for up to 30 days
  • Basic usage data — pages visited, features used, timestamps

Information we do NOT collect

  • We do not collect passwords (authentication is passwordless via email magic links)
  • We do not access your Airbnb account or credentials
  • We do not collect or store payment card details (payments are handled entirely by LemonSqueezy)

2. How We Use Your Information

  • Email address — to deliver analysis results, send login links, and communicate about purchases
  • Listing URL — to retrieve publicly available listing data and generate your analysis
  • IP address — solely for rate limiting to prevent abuse
  • Usage data — to improve our service and fix technical issues

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

  • Contract performance (Article 6(1)(b)) — processing your email and listing URL is necessary to provide the analysis service you requested
  • Legitimate interest (Article 6(1)(f)) — collecting IP addresses for rate limiting and abuse prevention
  • Consent (Article 6(1)(a)) — where applicable, such as optional communications

4. Third-Party Service Providers

ProviderPurposeLocation
SupabaseDatabase & authenticationEU (Frankfurt)
LemonSqueezyPayment processing (Merchant of Record)United States
AnthropicAI analysis engineUnited States
VercelWebsite hostingGlobal

5. Data Retention

  • Analysis results — retained so you can access your reports
  • Email addresses — retained as long as your account exists
  • IP addresses — retained for up to 30 days, then deleted
  • Payment records — retained as required by tax and accounting regulations

You may request deletion of your data at any time (see Section 7).

6. Data Security

  • All data is transmitted over encrypted connections (HTTPS/TLS)
  • Database access is restricted and authenticated
  • Payment data is handled exclusively by LemonSqueezy's PCI-compliant infrastructure
  • We do not store passwords

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data
  • Restriction — request that we limit processing of your data
  • Portability — request your data in a machine-readable format
  • Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at boraboytorun2005@gmail.com. We will respond within 30 days.

8. International Data Transfers

Some of our service providers are located outside the European Economic Area. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms as required by GDPR.

9. Cookies

Our service uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

10. Children

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.

12. Contact

For privacy-related inquiries or to exercise your data rights:
Email: boraboytorun2005@gmail.com