Privacy Policy
Last updated: May 2026
1. Overview
Registroom is a property management tool for short-term rental hosts. It helps hosts collect guest identification data required by Spanish law (Mossos d'Esquadra / Guardia Civil registration) and optionally store records in Google Drive.
2. Data We Collect
- Guest data: name, document number, nationality, date of birth, address, phone, email — collected via the guest check-in form and required by Spanish regulations.
- Reservation data: check-in/check-out dates, Airbnb reservation codes — imported from Airbnb iCal feeds.
- Host account data: email address and name from Google Sign-In, used solely to authenticate access to the dashboard.
- Google Drive: if you connect Drive, we store an OAuth refresh token to upload check-in records (TXT files and PDF receipts) to a folder you specify. We only create and upload files — we never read, modify, or delete other files in your Drive.
3. How We Use Your Data
- To generate and submit guest registration files to Mossos d'Esquadra as required by Spanish law.
- To display reservation and check-in status in the dashboard.
- To upload copies of registration files to your connected Google Drive folder.
- To send notifications (Telegram) about completed check-ins and Mossos submissions.
We do not sell, share, or use your data for advertising or any purpose beyond operating the service.
4. Google Drive Scope
We request the https://www.googleapis.com/auth/drive.file scope, which allows us to create and manage only the files that this application creates. We cannot access any other files in your Google Drive. You can revoke this access at any time from your Google Account permissions.
5. Data Storage
Data is stored in Supabase (PostgreSQL), hosted in the EU. Sensitive guest data (identity documents, the police-registration file and receipt) is encrypted at rest. Guest records are retained for the period required by Spanish short-term rental law (approximately 3 years) and then automatically deleted. Hosts can delete their account and all associated data at any time from Settings → Profile → Danger zone.
6. Third-Party Services
- Supabase — database hosting
- Vercel — application hosting
- Google Drive API — optional file storage
- Mossos d'Esquadra — mandatory legal submission
- Telegram — optional notifications