Last updated: 13/07/2026
This policy explains how Pronto Host processes personal data under Regulation (EU) 2016/679 (GDPR). The Italian version prevails in case of discrepancy.
The controller is MYLAE DIGITAL DI DAVIDE MERENDA, Piazzale Europa n. 2, int. 1 — 98057 Milazzo (ME), Italia, C.F. MRNDVD91D18F158T – P.IVA 03878780836. For any request about your data, contact hello@pronto-host.com.
Account data: email address and, if you sign up with a password, the password (stored encrypted). If you sign in with Google, authentication is handled by Google and we do not process any password.
Property data you (the host) enter: property name, address, phone, optional WhatsApp and email, Wi-Fi name and password, check-in/out times, access codes and guide content.
Payment data: handled entirely by Stripe; we never store card numbers. We keep only technical identifiers (e.g. customer/subscription IDs) and subscription status.
Referral data: your invite code, the links between referrer and referred users, and technical records needed to apply, reverse, and reconcile Stripe balance credits.
Technical data: functional cookies (language, session, referral) and technical logs needed for operation and security.
Providing the service (creating, generating, editing and publishing guides): performance of the contract.
Managing subscriptions and payments: performance of the contract and legal obligations.
Security, abuse and fraud prevention: legitimate interest.
Service communications (e.g. password-reset emails): performance of the contract.
We rely on providers that process data on our behalf: Convex (database and backend), Vercel (application hosting), Stripe (payments), Resend (transactional email).
If you choose to sign in with Google, Google processes authentication data (your email address and basic profile information) as an identity provider, to let you log in.
When you activate recommendation generation or automatic translations, some property and guide data (e.g. city, address and content to translate) is sent to generation providers: Perplexity, Google (Places/Maps) and Anthropic, to produce nearby places and services or translate content.
We do not sell your data and do not share it with third parties for marketing.
Some providers (e.g. Stripe, Anthropic, Google, Perplexity, Vercel) may process data outside the EU, in particular in the United States, on the basis of appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses).
We keep data for as long as needed to provide the service and while your account is active. You can request deletion from the Account section; if you have an active Stripe subscription, you must cancel it or let it end first. Deletion permanently removes the account and its guides. Some technical payment and referral records may be retained as required by law or for audit, fraud prevention, and accounting reconciliation.
You have the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability. Exercise these rights by writing to hello@pronto-host.com. You may also lodge a complaint with your data protection authority.
The content you publish (the guide) is visible to guests via a link. You are responsible for the data you put into guides and for its lawfulness. Pronto Host processes that data on your behalf solely to show it to guests.
The service is aimed at professionals and is not intended for minors. We do not knowingly collect minors' data.
We may update this policy; the version in force is the one published on this page, with its last-updated date.
When enabled, we use Sentry with the Germany data region for application errors, Better Stack with intended EU processing for availability and on-call, and Vercel Web Analytics and Speed Insights for aggregate technical measurements in production only. We minimize data before sending it and target a maximum 30 days for error and diagnostic-log retention. Actual configuration, DPAs, subprocessors, location and retention are checked before activation; these tools are not intended for advertising profiling.
We may send one promotional reminder about the referral programme on the basis of legitimate interest. You can object at any time using the unsubscribe link in the email.