Privacy Policy

1. Who is responsible for your data

Klimpy is in development and its company is not registered yet. Until it is, the controller is Amine Kaghat, a natural person acting on Klimpy's behalf.

Questions about this policy, or about how your data is handled, go to privacy@klimpy.com.

2. Controller and processor: which one applies

Klimpy acts as a controller for the data of its own users — the accounts of the hosts, property managers and cleaners who use the service — and for the waitlist.

For traveller data submitted through the platform under Real Decreto 933/2021, Klimpy acts as a processor on the accommodation provider's instructions. The provider remains the controller and the party registered with the authority.

3. What data is processed and why

Account data — name, email address and telephone number — is processed to provide the service, on the basis of the contract between you and Klimpy. Owners who use the tax features also provide their tax identification number, date of birth, residence address and bank account (IBAN), used to prepare their tax declarations.

Traveller data is processed to meet the documentary-registration duty the accommodation provider is subject to, on the basis of that legal obligation. From the booking: the guest's name, email and phone. From each traveller's ID (main guest and companions): full name, document number, date of birth, document expiry date and nationality, plus the result of the document checks. The ID photo and any selfie are read in memory and never saved. No payment data is collected.

Support correspondence is processed to answer you, on the basis of legitimate interests.

4. The waitlist

To join the waitlist you email privacy@klimpy.com. The subject line is filled in with the language of the page you were on (for example "Klimpy waitlist (es)"), so we can see which languages people need; you can change it before sending. We keep your email address, that language, and anything you choose to write, only to tell you when Klimpy launches.

We keep it until launch or until you ask to be removed, whichever comes first. To be removed, or to have your data erased, write to privacy@klimpy.com; we answer within one month.

5. Who the data is shared with

Traveller registrations are transmitted to the Spanish Ministry of the Interior through the SES Hospedajes platform.

Klimpy uses these providers to run the service: Supabase (database, file storage and sign-in; EU, Frankfurt), Railway (application hosting; EU, Netherlands), Vercel (hosting of this website and the dashboard), RunPod (reading ID documents), Anthropic and Voyage AI (the AI concierge that answers guests), Seam and SwitchBot (smart-lock and building-door access codes), Channex (bookings from booking channels), Stripe (payments to cleaners) and n8n (notification emails and messages, where enabled). Several of these providers are established outside the EEA.

A one-way hash of each registration record is written to the public Solana blockchain as a timestamp. The hash contains no names or document data.

6. How long data is kept

Identity data, email and phone are deleted 3 years after check-out (after a 30-day grace period). After 5 years the guest's name is deleted; the stay dates and the SES registration reference are kept, without the guest's name or contact details. A legal hold on a booking suspends both until it is lifted.

Records of each use of a guest link (time, page, outcome and a shortened IP address — never the link itself) are deleted with the booking's data; records for links that match no booking are deleted after 90 days.

The text of AI concierge conversations is erased after 90 days.

Photos, after a 30-day grace period: before/after cleaning photos 60 days after they are taken; other cleaning-report photos 5 years; incident photos 3 years after the incident is resolved. Cleaners' onboarding documents: 5 years after their last completed task.

7. Your rights

You may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. To exercise any of these, write to privacy@klimpy.com; we answer within one month.

Where Klimpy acts as a processor, requests about traveller data are forwarded to the accommodation provider, who is the controller and answers them.

If you consider your data has been handled unlawfully you may complain to the Agencia Española de Protección de Datos, or to the supervisory authority of your country of residence.

8. What this website stores in your browser

klimpy_theme (local storage): your light or dark theme choice. Kept until you clear your browser data.

klimpy_lang (local storage): the language you picked on the home page. Kept until you clear your browser data.

Nothing else is stored. There are no analytics or advertising cookies.

The pages of this website load their fonts, scripts and images from this website only; opening them makes no request to another company's servers.

9. Changes to this policy

Material changes are announced on this page and take effect on the date shown at the top. The date changes whenever the text changes.