1. Data controller

SPLETNA PRODAJA, ARNES KUDUZOVIĆ S.P. (Slovenia) is the data controller for personal data processed via the Service.

Contact: contact@rativa.ai

2. Personal data collected

We process only data necessary to provide the Service:

Business account data (company / property name, business email, contact details if provided).
Account data (email address, authentication tokens for magic link login, preferences, selected competitors, autoscrape settings, alerts configuration).
We do not collect personal data of hotel guests.

We process data to provide access, operate the Service, manage subscriptions, communicate with customers, ensure security, and improve the Service.

Legal bases under GDPR Article 6: contract performance (6(1)(b)), legitimate interest (6(1)(f)), and legal obligation (e.g. accounting).

Our infrastructure is hosted within the European Union. We may use GDPR-compliant processors such as Supabase (database) and Vercel (hosting).

We do not transfer data outside the EU without appropriate safeguards.

We retain data during an active subscription, as required by applicable laws (e.g. accounting), or until deletion is requested where applicable.

Under GDPR you have rights including:

Access, rectification, erasure, restriction, portability, objection.
To exercise rights, contact: contact@rativa.ai
You may lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec).

We apply appropriate technical and organizational measures including encrypted connections (HTTPS), access controls, and EU-based infrastructure.

We use essential cookies required for authentication and core functionality.

We do not perform behavioral advertising profiling. If analytics tools are introduced, we will update this Policy.

Infrastructure providers act as data processors under GDPR-compliant agreements and process data only on our instructions.

We may update this Policy. If changes are material, we will notify users via email or an in-app notice.