Privacy Policy

We collect information you provide directly when you create an account, list a property, make a booking, or contact us. This includes:

• Account information: name, email address, phone number, profile photo, and government-issued identification for identity verification
• Booking data: reservation details, check-in and check-out dates, guest count, payment information, and communication with hosts or guests
• Property information: listing details, photos, descriptions, pricing, availability, and property features across all three modes (vacation rental, monthly rental, and sale)
• Usage analytics: pages visited, search queries, device information, IP address, browser type, referring URLs, and interaction patterns with the Platform

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features
• Process bookings, payments, and payouts between hosts and guests
• Verify user identity and prevent fraud, abuse, and unauthorized access
• Send transactional communications (booking confirmations, payment receipts, account notifications)
• Personalize your experience, including AI-powered property recommendations and yield insights
• Analyze usage trends to improve Platform performance, security, and user experience
• Comply with legal obligations and enforce our Terms of Service

We will never sell your personal information to third parties for their own marketing purposes.

We share your information only in the following limited circumstances:

• With other users: hosts see guest profiles and booking details; guests see host profiles and property information as necessary to facilitate reservations
• Stripe: our payment processor receives payment and banking information necessary to process transactions and payouts securely
• Supabase: our database and authentication provider stores user data with enterprise-grade encryption and access controls
• RentCast: receives property addresses and zip codes to provide rent estimates, property valuations, sale data, and market trends
• AirROI: receives city and location data to provide vacation rental market intelligence including ADR, occupancy rates, RevPAR, and revenue data
• Google Places / Google Maps: receives address queries for autocomplete, geocoding, and embedded map displays on property and search pages
• OpenStreetMap + Leaflet: provides interactive map tiles for the property search map view; no personal data is transmitted
• Legal requirements: we may disclose information when required by law, regulation, legal process, or governmental request
• Business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Row-level security policies in our database ensuring users can only access data they are authorized to view
• Regular security audits and vulnerability assessments
• Secure authentication with support for multi-factor authentication

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users in the event of a data breach as required by applicable law.

We use cookies and similar technologies to operate the Platform, remember your preferences, understand how you interact with our services, and improve your experience. The types of cookies we use include:

• Essential cookies: required for authentication, security, and core Platform functionality
• Functional cookies: remember your preferences such as language, currency, and search filters
• Analytics cookies: help us understand usage patterns and improve the Platform

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. We do not use cookies for third-party advertising purposes.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to deletion: request erasure of your personal data, subject to legal retention requirements
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to processing of your data for certain purposes
• Right to restrict processing: request limitation of how we process your data

To exercise any of these rights, contact us at privacy@sky-alo.com. We will respond within 30 days of receiving your request, or within the timeframe required by applicable law. Under CCPA, California residents may also request disclosure of data sold or shared, and opt out of the sale of personal information. We do not sell personal information.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@sky-alo.com so we can take appropriate action.

Sky-Alo operates globally, and your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards in compliance with applicable data protection laws, including Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA, and equivalent mechanisms for transfers from other jurisdictions.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. We will notify you of material changes by posting the revised policy on the Platform with an updated effective date and, where required by law, by sending an email notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: