Privacy Policy

SPLETNA PRODAJA, ARNES KUDUZOVIĆ S.P. (Slovenia) is the data controller for personal data processed via the Service.

Contact: contact@rativa.ai

We process the following data to provide and protect the Service. We do not request hotel guest personal data; please do not include it in uploads or messages.

• Account and authentication data: email address, login codes or links, identifiers and preferences.
• Hotel and business data: property details, selected competitors, rate-check settings, alerts, performance information and feedback you provide.
• Public market data: accommodation listings and competitor rates from Booking.com, including current and historical rate observations.
• Billing data: subscription status, payment-provider identifiers and limited billing or transaction details. Rativa does not store full card details; these are handled by the payment provider.
• Contact and guided-setup requests: names, business contact details, property information and messages you submit.
• Technical and operational data: IP addresses, browser/device information and logs needed for delivery, troubleshooting, security and service operations.

We process data to provide access, operate the Service, manage subscriptions, communicate with customers, ensure security, and improve the Service.

Legal bases under GDPR Article 6: contract performance (6(1)(b)), legitimate interest (6(1)(f)), and legal obligation (e.g. accounting).

Supabase provides authentication and database hosting; the current database region is Frankfurt, Germany. Vercel hosts the application.

Other providers and their subprocessors may process data outside the European Economic Area. Where required, transfers must rely on applicable safeguards, such as adequacy decisions or standard contractual clauses; a European database location does not mean all processing stays in Europe.

Cancelling a subscription is separate from deleting an account. Account data can remain available after a trial or subscription ends, including existing hotel and rate information.

Deleting a property removes its active configuration and related current data, but historical rate observations and some analytical records may remain. It does not delete the whole account or payment-provider records.

We retain personal data only as needed for the stated purposes, legal obligations, security and resolving disputes. To request deletion, contact contact@rativa.ai. Applicable exceptions, backup cycles and provider retention may affect what can be erased and when.

Under GDPR you have rights including:

• Access, rectification, erasure, restriction, portability, objection.
• To exercise rights, contact: contact@rativa.ai
• You may lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec).

We apply appropriate technical and organizational measures, including encrypted connections (HTTPS) and access controls.

We use essential cookies required for authentication and core functionality.

We do not perform behavioral advertising profiling. If analytics tools are introduced, we will update this Policy.

Supabase handles account authentication and database data; Vercel handles application hosting and related technical logs.

Resend is used for transactional email, such as authentication and service notifications, and processes recipients and message content.

Slack may receive contact or guided-setup messages, business details, masked contact email addresses and operational notifications. Message text may itself contain personal data.

Stripe and Link handle checkout, payment details, subscriptions and billing records. Their role may be processor or independent controller depending on the service, including merchant-of-record services; their own privacy notices apply to that processing.

We use data-processing agreements where a provider acts as our processor. Providers may use subprocessors; payment and other providers may also process data for their own legal or security obligations.

We may update this Policy. If changes are material, we will notify users via email or an in-app notice.