AutoBnB is operated by Gerlich Enterprises LLC (“AutoBnB,” “we,” “us”). This policy explains what we collect when you use our short-term-rental operations platform, how we use it, and the choices you have. It covers both the property owners and managers who are our customers and the guest data those customers bring into the product.
Who this covers
For your own account data, AutoBnB is the controller. For the guest and reservation data you connect from your booking channels and PMS, you are the controller and AutoBnB acts as your processor — we handle that data on your behalf and under your instructions to run your listings.
Information we collect
- Account & workspace: your name, email, sign-in identity (Google sign-in, or a one-time code we email you), workspace settings, and role.
- Connected-channel data: when you connect a PMS, AutoBnB channel sync, or OTAs (Airbnb, Vrbo, Booking.com), we import listing content, addresses and coordinates, calendars, reservations, pricing, and guest messages.
- Guest data: guest names, contact details, messages, and booking/economics tied to reservations on your listings.
- Operations data: cleaning and turnover schedules, smart-home devices and access codes, and thermostat state from the accounts you connect.
- Business texting registration: the business details you enter to register your texting number with carriers. If you take a photo of your IRS EIN letter, or choose its file, to fill them in, AutoBnB reads it once with an AI model (through OpenRouter) and shows you what it found to check. We do not keep the photo, the file or what was read from it; only the details you then save are stored.
- Financial data: subscription billing details processed by Stripe, and — where you enable property accounts — account, card, balance, and transaction data via Stripe Treasury/Issuing. If you verify your business for property accounts with your IRS EIN letter, AutoBnB reads it with an AI model (through OpenRouter) and shows you what it found to check. It keeps the file, encrypted, only until you send it to Stripe, and erases it then, or after 24 hours if you never send it. It sends the letter, with the business details you confirmed, to Stripe to verify the business; afterwards AutoBnB keeps only the last four digits of the EIN.
- Utility account data: provider names, login URLs, optional account numbers, and statements you choose to import. You sign in directly with the provider, and AutoBnB does not ask for or accept new utility credentials.
- Diagnostics: log data, IP address, device metadata, and error or usage events processed through our hosting, Sentry, and PostHog configurations.
- First-party analytics: a random browser identifier kept in local storage, a random session identifier kept in session storage, page paths and basic interactions, and coarse city, region, and country derived at the network edge. Query strings and fragments are removed. When you are signed in, events may be linked to your account and workspace. We do not store your IP address in these first-party analytics records.
How we use information
- To operate the product, including syncing listings, pricing nights from local competition and event demand, drafting and (once you allow it) sending guest messages, issuing access codes, running climate schedules, coordinating cleans, and reviewing utility statements you choose to import.
- To provide our AI features, including optional analysis of cleaner proof photos against the supplies you track. AI actions are approval-gated by default: nothing is sent to a guest or submitted to a connected service until you approve it or explicitly enable automation for that action. Financial and replenishment workflows currently prepare and validate readiness records; AutoBnB does not transfer those funds or submit vendor checkout.
- To bill your subscription, provide support, secure the service, prevent abuse, and meet legal obligations.
We do not sell your personal information, and we do not use guest data for advertising. We do not use your or your guests’ content to train foundation models.
How we share information
We share data with the subprocessors that make the product work — hosting, database, AI, payments and property accounts, and the integrations you connect. See our Subprocessors list for the current set, what each handles, and where it’s located. We also share information when required by law, to protect rights and safety, or as part of a business transfer. Every subprocessor is bound by contract to protect the data and use it only to provide their service to us.
Text messaging (SMS)
AutoBnB sends text messages on behalf of the hosts who use it, from a phone number registered to each host’s business. These texts are called “AutoBnB messages.” A host’s number is a business number to text and call the cleaners, handymen and other vendors who work on their homes.
- Cleaners, handymen and other vendors: a host adds your mobile number when you agree to clean or service their rental. We use it to text you job assignments, schedule confirmations, door codes for your visit, issue instructions, and replies in your conversation with the host. If you use the AutoBnB cleaner app, we also text sign-in codes to that number.
- Owners and their team: the number you give us for alerts about your properties and account.
- Guests: your mobile number comes from your booking (through a site such as Airbnb or Vrbo, or directly with the host). Now and then, and only when the host chooses to, we text you about that booked stay, such as check-in details. If you text the host’s number, your reply goes to the host.
We record the texts sent and received, the numbers involved, delivery status, and any opt-out or opt-in you send (such as STOP or START), so the host can see the conversation and so we honor your choice. We also keep a log of calls to the host’s number: the numbers involved, when, how long, and how the call ended.
Texts are delivered through Twilio, which acts as our service provider and handles your number and message content only to carry the texts for us (see Subprocessors). Mobile carriers also process the messages to deliver them.
Retention. Text messages and delivery records are kept with the host’s workspace so the host can see the conversation, and are deleted when the host deletes the workspace or account (within 30 days, as described below). Sign-in codes expire after 10 minutes and are removed once used or replaced. A record that you replied STOP is kept for as long as the workspace exists, so we keep honoring it; replying START removes it. You can opt out at any time by replying STOP. See our SMS terms for details.
Data retention
We keep account and workspace data while your account is active. Connected-channel and guest data is retained until you disconnect the source or delete it, or until your workspace or account is deleted. On account deletion we delete or de-identify your data within 30 days, as described in Deleting your account, except where we must retain records for legal, tax, accounting, or security purposes (for example, payment records).
Automated expiration of first-party analytics is currently disabled. Until a reviewed retention schedule is enabled, those records remain until we delete or de-identify them in response to a valid request or an operational need. The available retention job defaults to 90 days when enabled and cannot be configured beyond 365 days. We will update this policy if the active retention practice changes.
Deleting your account
You can delete your account yourself, in the AutoBnB app or on the web: open Settings → Delete account. Before anything happens we show you what it will do, naming each of your workspaces, and you confirm it. It can’t be undone.
- Your account: you’re signed out everywhere, your phones stop receiving notifications, and your name, email address, and photo are removed from your account right away.
- Workspaces you own alone: they close with your account. Their plans are canceled at once, AutoBnB stops messaging their guests, changing their locks, and running their other automations, and their data (properties, reservations, guest messages, photos, and everything else in them) is permanently erased 30 days later.
- Workspaces with another owner: they stay with that owner, and you simply leave them.
- Door codes: codes already on a smart lock stay on the lock until they’re removed at the lock.
We send a short confirmation to the email address the account had. We keep a minimal record that the deletion happened (identifiers and dates, never your name or address), and the records we must keep for legal, tax, accounting, or security purposes. You can also email privacy@autobnb.space and we’ll delete your account for you.
Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these in-product (you can delete your account from Settings) or by emailing privacy@autobnb.space. Because guests’ data is controlled by the host whose listing they booked, guest requests are routed to that host; we assist as processor.
Security
Data is encrypted in transit (TLS 1.2+) and at rest. Sensitive integration tokens and historical beta secrets are encrypted with application-layer authenticated encryption. Access is scoped per workspace and enforced in the data layer. You sign in with Google or with a one-time code we email you. We never store your Google password, and an emailed code is stored only as a keyed hash, works once, and expires after 10 minutes. See our practices summarized across this policy; report a vulnerability to security@autobnb.space.
Cookies and browser storage
We use strictly necessary cookies for authentication. Our first-party analytics uses the random local-storage and session-storage identifiers described above to understand product usage. We do not use third-party advertising cookies.
Children
AutoBnB is a business tool not directed to children, and we do not knowingly collect data from anyone under 18.
International transfers
We operate in the United States and our subprocessors are US-based. If you access the service from outside the US, you understand your data is processed in the US under this policy.
Changes to this policy
We may update this policy; we’ll revise the “last updated” date and, for material changes, give notice in-product or by email.
Contact
Gerlich Enterprises LLC — privacy questions and data requests: privacy@autobnb.space. General support: support@autobnb.space.