Privacy policy
Last updated: 6 September 2026
1. Data controller
Simon Tydén Busck (sole proprietorship)
Krönvägen 1, 451 77 Uddevalla
Email: simon.tyden@busck.nu
We are responsible for processing your personal data when you use GuestBot (guestbot.se).
2. What data we collect
If you are a host (registered user):
- Email address and name at registration
- Property information you enter yourself (address, descriptions, house rules, etc.)
- Technical data related to sign-in and account use
- Payment information is handled by Stripe — we do not store card details
If you are a guest (using the chatbot):
- Chat conversations with the bot (and any questions to the host)
- Technical data such as IP address and browser type
- When you ask about nearby places, the reply is based on the host’s saved tips, not a maps service
If you visit the website:
- Necessary technical data for the site to work
- With consent: analytics via Google Analytics and Microsoft Clarity (page views, clicks, scroll, session recordings)
3. Legal basis and purpose
We process your data on the following legal bases:
- Contract – to deliver the service (account, properties, guest chat)
- Legitimate interest – operations, security, troubleshooting, and improving the service
- Consent – for analytics cookies/tools (Google Analytics and Microsoft Clarity) via our cookie banner
We never sell your data to third parties.
4. Third parties we share data with
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, and storage of account/property data | EU |
| Stripe | Payments (no card details stored with us) | EU/US |
| Google Analytics | Visitor statistics (requires consent) | USA |
| Microsoft Clarity | Heatmaps and session replays (requires consent) | USA |
| Anthropic (Claude) | AI replies in guest and host chat | USA |
| Resend | Email delivery | EU/US |
| Vercel | Hosting and running the website | EU/US |
5. Storage and security
Your data is stored in Supabase within the EU with encryption at rest and in transit. We use Row Level Security (RLS), meaning each user can only see their own data. Access to personal data is limited to those responsible for the service.
6. How long we keep your data
We keep your data for as long as your account is active. If you close your account and request deletion, all related data is deleted within 30 days. Analytics data at Google Analytics and Microsoft Clarity is kept according to each provider’s retention periods until you withdraw consent or request deletion.
7. Your rights
You have the right to:
- Access the data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Object to processing
- Data portability receive your data in a machine-readable format
- Withdraw consent to analytics cookies at any time via Cookie settings in the footer
Contact us at simon.tyden@busck.nu to exercise your rights. We respond within 30 days.
8. Cookies and similar technologies
We use cookies and local storage in your browser. You choose via our cookie banner. After your choice, you can open the settings again via Cookie settings in the footer.
Necessary
- Sign-in session (Supabase Auth)
- Your cookie choices (cookie-consent)
Analytics (requires consent)
- Google Analytics – page views and events (e.g. clicks on "Get started")
- Microsoft Clarity – heatmaps and session recordings
We currently do not use marketing cookies or ad tracking.
9. Contact and complaints
Questions about how we handle your personal data? Contact us at simon.tyden@busck.nu.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se · imy@imy.se · 08-657 61 00