TowelsOn

We may collect the following types of personal information:

• Identification Information: such as your name, email address, and other contact details.
• Account Information: data related to your user account, including username, password, and account preferences.
• Usage Data: information about how you interact with our App or Service, such as IP address, device information, and usage patterns.
• Payment Information: billing details, payment method, and transaction history when you subscribe to a paid plan.
• Communications Data: inquiries, feedback, or support requests you send us.

Your personal data is collected for the following purposes:

• To Provide the Service: offering reservation management, maintaining your account, processing transactions.
• To Improve Our Service: analyzing usage data to enhance performance and user experience.
• To Communicate with You: responding to inquiries, sending updates, and important service-related notifications.
• To Send Marketing Communications: with your consent, sending promotional offers, newsletters, or marketing emails. You can opt out at any time.
• To Send Account and Service Notifications: informing you of changes to your account, pricing, or this Privacy Policy.
• To Comply with Legal Obligations: meeting tax reporting or other legal requirements.

If you choose to receive marketing emails or newsletters, you can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us directly.

We process your personal data based on one of the following legal grounds:

• Consent: you have given consent for specific purposes, such as signing up for a newsletter or creating an account.
• Contractual Necessity: necessary to perform our contract with you, such as providing the Service.
• Legal Obligation: required to comply with legal requirements.
• Legitimate Interests: to improve the Service or prevent fraud, balanced against your rights.

We retain your personal data as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. When no longer needed, data is securely deleted or anonymized.

We do not sell or rent your personal data. We may share your data with:

• Service Providers: trusted providers like payment processors and cloud hosts, bound by confidentiality obligations.
• Legal Authorities: when required by law or valid governmental requests.

Your personal data may be transferred to and processed in countries outside the EEA where data protection laws may differ. We implement appropriate safeguards, such as EU-approved standard contractual clauses.

We use appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no online transmission is 100% secure.

EEA residents have rights under GDPR:

• Access: request access to your personal data.
• Rectification: request corrections.
• Erasure: request deletion, subject to limitations.
• Restriction: request limited processing in certain cases.
• Objection: object to certain processing.
• Data Portability: request transfer of your data in machine-readable format.
• Withdraw Consent: withdraw your consent at any time.

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

When providing our Service to businesses such as hotels, we may act as a data processor on their behalf. Those businesses are responsible for ensuring they have a lawful basis to share guest data with us and for providing any necessary notices to their customers.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make any material changes, we will notify you by email or through our App. Continued use of our Service after changes indicates acceptance.

If you have questions about this Privacy Policy or how we handle your data, please contact us.