Privacy Policy

1. Data Controller

Rebrid is the controller for personal data processed through this platform.

2. Data We Collect

2.1 Account Data

Email, authentication method, user type, and profile information you provide.

2.2 Usage and Device Data

Page interactions, timestamps, referral information, browser type, and device context where permitted by your consent settings.

2.3 Security Data

IP-based security events and abuse-prevention logs to protect the service.

3. How We Use Data

• Provide account access, profile features, and booking-related workflows.
• Maintain platform integrity, fraud prevention, and abuse detection.
• Analyze product performance and improve user experience.
• Comply with legal obligations and enforce platform terms.

4. Legal Bases for Processing

Depending on jurisdiction, processing may rely on contract necessity, legitimate interests, legal obligations, and user consent for optional analytics/marketing.

5. Infrastructure and Service Providers

5.1 Hosting and Runtime

Vercel is used for website hosting, edge/network delivery, and request handling.

5.2 Authentication, Database, and Storage

Supabase is used for authentication, database records, session handling, and storage.

5.3 Analytics

Google Analytics may be used where consent is granted, to understand aggregate traffic, conversion funnels, and product usage patterns.

6. Cookies and Similar Technologies

We use essential cookies for login/session continuity and may use optional analytics cookies subject to your consent settings.

• Necessary: required for authentication, security, and core site operation.
• Analytics: optional measurement and performance insights (e.g., Google Analytics).
• Marketing: currently limited; activated only where consented and configured.

7. Data Retention

Data is retained only as long as required for service operation, legal compliance, and security purposes, then deleted or anonymized.

8. Data Sharing

We do not sell personal data. Data may be shared with trusted processors and service partners strictly for operational and legal purposes.

9. Security Measures

We apply layered controls including access restrictions, monitoring, and abuse detection; no system can guarantee absolute security.

10. Your Privacy Rights

Subject to applicable laws, you may request access, correction, deletion, restriction, portability, or objection to certain processing.

11. International Data Transfers

Data may be processed in regions where our processors operate, with safeguards appropriate to applicable legal requirements.

12. Policy Updates

We may update this policy; material changes are reflected by an updated date.

13. Contact Us

For privacy requests: hello@rebrid.co