Privacy policy

Effective 14 November 2026. The Italian text prevails if the versions differ.

1. Who handles your data

The data controller is Garby Consulting Ltd, an Israeli company, registration number 514981943, Jerusalem, Israel (“we”). For any privacy question write to us from the Contact page.

2. What we collect

• Account: first and last name, e-mail, country, city, role (owner or manager), phone if you give it, your password (stored encrypted: we cannot see it), the date you accepted the terms and, if you choose, your consent to receive news.
• Data you upload: homes, bookings (including guest names, dates and amounts), manager reports, bank statements and keys to connect other services such as Hospitable (stored encrypted).
• Site forms: what you write in the Contact form and in the window before the demo.
• Technical data: IP address and access logs, used for security and to stop abuse.
• Payments: handled by Paddle.com; we only receive the outcome, the plan chosen and the country for tax purposes, never your card details.

3. Why we use it

To let you use Quadra and run the checks you ask for (performance of the contract); to protect the service and our customers (our legitimate interest); to answer your messages; to send you news only if you asked for it (consent, which you can withdraw at any time); and to meet legal duties, such as accounting. We do not sell your data, we do not use it for advertising and we do not use it to train artificial intelligence models.

4. Who helps us

We use a few providers, each only for its own task: Supabase (database, servers in Frankfurt, European Union), Netlify (website and calculations, including in the United States), Cloudflare Turnstile and Google reCAPTCHA (checking that a person is writing), Paddle.com (payments and invoices) and, if you connect it yourself, Hospitable. When data leaves the European Union, the transfer is protected by the standard contractual clauses approved by the European Commission or equivalent safeguards.

5. How long

We keep the data while your account is active. If you ask for deletion, we delete it within 30 days; backups overwrite themselves within a few days. We keep longer only what the law requires, such as invoice data.

6. Your rights

You can ask to see your data, correct it, delete it, get a copy in a readable format, and restrict or object to its use. You can also contact the data protection authority of your country or, in Israel, the Privacy Protection Authority.

7. Cookies and browser storage

We use no advertising or profiling cookies. The browser only remembers your sign-in and your preferences (language, currency, chosen space). The anti-robot checks of Cloudflare and Google may use their own technical data for that task.

8. Security

Each customer's data is kept separate from everyone else's, connections are encrypted, keys to other services are encrypted, and the database has daily backups.

9. Changes

If we change this policy, the version in force is always on this page with its date; if the change is important we flag it inside the service.