Privacy policy

Adory LLC is responsible for your personal data. Contact for anything about your data: [email protected].

Guests: name, email, phone, the details of your bookings (property, dates, number of guests, amounts paid and refunded), messages you write to our assistant, and the records of your acceptance of our terms (date, IP address and browser).

Property owners and their team: name, email, phone/WhatsApp, the properties you manage and their photos, your bank details for payouts (Mexican CLABE or US routing and account number), your plan and billing history, and the records of your acceptance of our owner agreement.

Signing in: your password is stored only as a one-way hash. If you use “Continue with Google”, we receive your name, email and a Google account identifier. If you use a passkey, we store only its public key: your fingerprint, face or device PIN never leave your device.

Payments: card details are entered on and processed by Stripe; Adory never sees or stores your full card number. We keep the payment references and amounts.

Other platforms: when an owner connects an Airbnb or other calendar, we receive the dates of those stays and, when the platform includes them, the confirmation code and the last 4 digits of the guest's phone.

We do not ask for sensitive personal data (such as health, religion or sexual life).

Primary purposes (needed for the service): create and manage your account; process, confirm, change and cancel bookings; collect payments and issue refunds; pay owners; send booking confirmations, reminders and service notices by email, WhatsApp or push; coordinate cleaning and maintenance; answer your questions; prevent fraud and keep the site secure; check that uploaded photos are suitable; and comply with legal and tax obligations.

We do not use your data for secondary purposes such as advertising or marketing. If that ever changes, we will ask for your consent first and you can refuse at any time without affecting your bookings.

With the owner of the property you book and their team, only to look after your stay. We do not sell your personal data.

With providers that process data on our behalf: Stripe (payments), Railway (hosting, United States), Cloudflare (domain and network), Resend (email), Meta / WhatsApp (notices and the WhatsApp concierge chats), Anthropic (our chat assistant, the WhatsApp concierge's replies, the automatic photo check and the review of price-match screenshots), Google (sign-in, if you choose it) and GitHub (private database backups). They may only use the data to provide their service to us.

With authorities when the law requires it, and with a successor if the business is transferred, under this same policy.

Some of these providers are in the United States, so your data may be stored or processed outside Mexico. By using the service you consent to these transfers, which are needed to provide it.

We use only the cookies the site needs to work: to keep you signed in, remember your language and preferences, protect sign-in with Google and passkeys, and give early access to the site while it is in preview. We do not use advertising or third-party tracking cookies. Our chat assistant only stores, in your browser, whether it has already shown you its help message.

Encrypted connections (HTTPS) everywhere; passwords stored as hashes; bank account numbers encrypted in the database and shown only masked (•••• 1234); access to the admin limited by role, with a log each time someone reveals bank details to make a payout; and nightly backups.

While your account is active, and afterwards for as long as needed to resolve disputes and to meet legal, accounting and tax obligations. Then we delete it or make it anonymous.

You can ask to access, correct or delete your data, object to its use, limit how it is used or disclosed, or withdraw your consent (in Mexico, the ARCO rights). Write to [email protected] with your name, the email of your account, a way to reply to you, what you are asking for and, if needed, a copy of an ID so we can confirm it's you. We will reply within the time the law sets (in Mexico, 20 business days).

Some data must be kept even if you ask us to delete it (for example, records of payments that the law requires us to keep). If you live in a US state with its own privacy law, you have the rights that law gives you, and you can use the same email.

If you think we have not respected your rights, you may also go to the data-protection authority of your country.

The site is not meant for people under 18, and we do not knowingly collect their data. Bookings must be made by an adult.

We will publish any change on this page with a new date and, if the change is important, tell you by email. Questions: [email protected].