Privacy policy

The data controller for your personal data is Proavela (hereinafter, "we"). You can contact us at privacitat@proavela.com for any privacy-related enquiry.

We collect the following data: • Identification data: name, surname, email, phone. • Billing data: tax ID, company name, fiscal address (where applicable). • Payment data: processed exclusively by Stripe (we do not store card details). • Browsing data: cookies, IP address, device, pages visited. • User-generated content: messages, reviews, boat photos. • Identity verification data: managed by Stripe Connect for Hosts.

We use your data to: • Manage your user account and profile. • Facilitate bookings and payments between Hosts and Guests. • Send transactional notifications (bookings, payments, messages). • Improve the platform and user experience. • Comply with legal and tax obligations. • Prevent fraud and ensure platform security.

The processing of your data is based on: • Contract performance: the data is necessary to provide the platform service. • Consent: for sending commercial communications and non-essential cookies. • Legitimate interest: to prevent fraud, improve the service and ensure security. • Legal obligation: to comply with tax and regulatory requirements.

We share your data with: • Stripe: payment processing and Host identity verification. • Resend: transactional email delivery. • Amazon Web Services (AWS): image storage. • Mapbox: map service (anonymous location data). • Anthropic: AI service for the support assistant (anonymous data). We do not sell your data to third parties. We only share data necessary to provide the service.

We retain your data while your account is active. If you delete your account, data will be kept for the legally required period (generally 5 years for tax obligations). Browsing data (cookies) is retained according to the periods indicated in the Cookie Policy.

You have the right to: • Access: request a copy of your personal data. • Rectification: correct inaccurate or incomplete data. • Erasure: request deletion of your data. • Objection: object to the processing of your data. • Portability: receive your data in a structured format. • Restriction: restrict processing in certain circumstances. To exercise these rights, write to privacitat@proavela.com. We will respond within a maximum of 30 days.

We implement technical and organisational measures to protect your data: encryption in transit (HTTPS), secure storage, restricted access, regular backups and security monitoring. Payments are processed entirely by Stripe, certified PCI DSS Level 1.

Some of our providers (Stripe, AWS, Resend, Anthropic) may process data outside the European Economic Area. In these cases, we ensure adequate safeguards exist (Standard Contractual Clauses, adequacy decisions, or equivalent certifications).