Last updated: 09/09/2026
This policy explains how Pronto Host processes personal data under Regulation (EU) 2016/679 (GDPR). The Italian version prevails in case of discrepancy.
The controller is MYLAE DIGITAL DI DAVIDE MERENDA, Piazzale Europa n. 2, int. 1 — 98057 Milazzo (ME), Italia, C.F. MRNDVD91D18F158T – P.IVA 03878780836. For any request about your data, contact hello@pronto-host.com.
Account data: email address and, if you sign up with a password, the password (stored encrypted). If you sign in with Google, authentication is handled by Google and we do not process any password.
Property data you (the host) enter: property name, address, phone, optional WhatsApp and email, Wi-Fi name and password, check-in/out times, access codes and guide content.
Payment data: handled entirely by Stripe; we never store card numbers. We keep only technical identifiers (e.g. customer/subscription IDs) and subscription status.
Referral data: your invite code, the links between referrer and referred users, and technical records needed to apply, reverse, and reconcile Stripe balance credits.
Technical data: functional cookies (language, session, referral) and technical logs needed for operation and security.
Providing the service (creating, generating, editing and publishing guides): performance of the contract.
Managing subscriptions and payments: performance of the contract and legal obligations.
Security, abuse and fraud prevention: legitimate interest.
Service communications (e.g. password-reset emails): performance of the contract.
We rely on providers that process data on our behalf: Convex (database and backend), Vercel (application hosting), Stripe (payments), Resend (transactional email and consented marketing communications).
If you choose to sign in with Google, Google processes authentication data (your email address and basic profile information) as an identity provider, to let you log in.
When you activate recommendation generation or automatic translations, some property and guide data (e.g. city, address and content to translate) is sent to generation providers: Perplexity, Google (Places/Maps) and Anthropic, to produce nearby places and services or translate content.
We do not sell your data. Any transfer to Meta for marketing measurement occurs only with consent and as described in the dedicated section.
Some providers (e.g. Stripe, Anthropic, Google, Perplexity, Vercel) may process data outside the EU, in particular in the United States, on the basis of appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses).
We keep data for as long as needed to provide the service and while your account is active. You can request deletion from the Account section; if you have an active Stripe subscription, you must cancel it or let it end first. Deletion permanently removes the account and its guides. Some technical payment and referral records may be retained as required by law or for audit, fraud prevention, and accounting reconciliation.
You have the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability. Exercise these rights by writing to hello@pronto-host.com. You may also lodge a complaint with your data protection authority.
The content you publish (the guide) is visible to guests via a link. You are responsible for the data you put into guides and for its lawfulness. Pronto Host processes that data on your behalf solely to show it to guests.
The service is aimed at professionals and is not intended for minors. We do not knowingly collect minors' data.
We may update this policy; the version in force is the one published on this page, with its last-updated date.
When enabled, we use Sentry with the Germany data region for application errors, Better Stack with intended EU processing for availability and on-call, and Vercel Web Analytics and Speed Insights for aggregate technical measurements in production only. We minimize data before sending it and target a maximum 30 days for error and diagnostic-log retention. Actual configuration, DPAs, subprocessors, location and retention are checked before activation; these tools are not intended for advertising profiling.
We may send one promotional reminder about the referral programme on the basis of legitimate interest. You can object at any time using the unsubscribe link in the email.
If you have not activated a plan 24 hours after creating your account and chose to receive promotional emails, we may send you one email with a discount on the first 30 days. The offer expires after seven days. You can withdraw consent at any time in your account settings or via the unsubscribe link in the email.
With your verified marketing consent, Pronto Host may send you one email with an Early Bird offer to return to your draft. The offer gives you 50% off the first 30 days and is valid for 7 days from issue.
You can withdraw consent at any time using the unsubscribe link in the email. Links and encrypted content are removed when no longer needed. We retain minimal data to prevent duplicate emails and attribute conversions, and aggregate metrics for 90 days.
The virtual assistant starts when you choose. Recent messages pass through our servers to Anthropic to select answers about Pronto Host. Do not enter sensitive or guest data. Pronto Host does not archive conversations in its databases: up to 12 messages remain in the tab's sessionStorage, removable with Clear conversation or when the tab session ends. Anti-abuse limits use HMAC-derived IP identifiers. Chat statistics require marketing measurement consent and contain no message text, email or tokens.
Requesting Early Bird is optional and separate from subscribing to other promotional emails. Resend delivers one email to verify the address; after confirmation, Stripe creates the discount and makes it available directly on the website to eligible users. We record encrypted email, an HMAC digest, language, request date and version. The single-use verification link lasts 30 minutes; unverified requests are deleted in the next cleanup cycle after 24 hours. Verified contact data is minimized 30 days after offer closure or expiry. Technical digests and unsubscribe or delivery-failure evidence may remain for a further 90 days to prevent duplicate or unwanted sends. Unsubscribes and delivery reports are respected. To exercise your rights, use the contact address in this notice.
Only with your consent do we use Meta Pixel and Conversions API to measure campaign visits, registrations, checkout starts and first confirmed purchases, attribute results and optimize ads. Meta measurement is off by default and your choice does not affect use of the service.
After consent, the browser Pixel can observe the current page URL, including campaign parameters visible in the browser. For server-side Conversions API events, we accept only approved Pronto Host origins and remove the query and fragment before storage or delivery. For eligible events we may also send Meta event metadata, IP address, browser/user-agent information, identifiers such as _fbp and _fbc, and normalized, hashed email. We do not send Meta passwords, Wi-Fi passwords, access codes, property or guide content, or payment-card data.
Meta may process this data as a recipient and, where applicable, an independent controller, including through international transfers under its safeguards. Information: https://www.facebook.com/privacy/policy/ and https://www.facebook.com/business/help/AboutConversionsAPI.
Separately from Meta, Pronto Host may retain validated campaign parameters for up to 7 days as first-party attribution and connect the source to an account after verified registration. Vercel measures the banner experiment and funnel in aggregate, with URL query data removed; we do not use it to reconstruct individual visitors. Information: https://vercel.com/docs/analytics/privacy-policy.
You can withdraw consent at any time using the persistent Cookie control. Withdrawal blocks future Pixel and Conversions API events and removes marketing identifiers writable from our domain; it cannot recall events already delivered. We keep the functional consent receipt, including policy version and decision date, for 6 months. For access, correction, deletion, restriction, objection, portability or a complaint, use the contacts and procedures in the rights section.