Privacy Policy

How BnbWise collects, uses, shares, and protects your data.

Effective date: October 18, 2026

1. Who we are and what this policy covers

BnbWise is a bookkeeping and operations service for short-term-rental hosts. It is operated by BnbWise (“BnbWise”, “we”, “us”). You can reach us at support@bnbwise.app.

This policy explains what personal information we collect through bnbwise.app, bnbwise.co and our messaging features, how we use and share it, how long we keep it, and the choices you have. It applies to:

• Hosts: people who create a BnbWise account (“you”).
• Service Providers: cleaners, contractors and other people a host adds as a contact and who receive text messages through BnbWise.
• Guests and others: people whose information appears in a host’s reservations or transactions.
• Visitors: people who browse our websites or use our contact form.

Our role. For your account, billing and use of our websites, we decide how your information is used; we are its “controller”. For the information you put into BnbWise about other people, we process it on your behalf and on your instructions; we are your “service provider” or “processor”. That includes guests in your reservations, payees in your transactions, and the Service Providers you add. You are responsible for having the right to share it with us. The one exception is phone-number consent and opt-out records (Section 6), which we keep for our own legal compliance.

2. Information we collect

2.1 Information you give us

• Account information:
  • your name and email address;
  • your password, which our authentication provider stores in hashed form and we never see;
  • your language, currency and time-zone preferences;
  • your mobile number, if you turn on two-step verification or text reminders.
• Property and business information:
  • properties: name, address, photo, rental platform, mortgage and loan details;
  • reservations, income and expenses, with categories, notes, receipts and photos you attach;
  • rules you teach BnbWise about how to categorize transactions;
  • tasks, checklists and automation rules.
• Bank statement files you upload (CSV, XLSX or TXT). See Section 3 for how these are handled.
• Service Provider contacts: the name, mobile number, preferred language and channel of each person you add, and the properties they work at.
• Messages: the text of messages you write or schedule, and when and to whom they were sent.
• Support requests: your name, email, topic, message and the page you sent it from, whether you use the in-app form or the form on bnbwise.co.
• Help assistant questions: what you type into the in-app help assistant.
• Your reason for leaving: if you close your account and choose to tell us why, what you write.
• Referrals: if you refer someone to BnbWise, the name and email address you give us for them. We use them only to send the invitation you asked us to send and to record whether they sign up, so we can credit your reward.

2.2 Information from services you connect

• Your bank, through Plaid. When you link a bank account, Plaid gives us:
  • the institution name;
  • account names, types and the last four digits of each account number;
  • up to 12 months of transaction history, followed by new transactions as they post.

  Each transaction includes its date, amount, description and payee. We receive an access token that lets us read transactions, but never your bank login credentials. We never make payments or transfers.

• Airbnb and Vrbo. From the reservation and payout files you export and upload, we read:
  • guest names, confirmation codes and stay dates;
  • nightly rates, fees, taxes withheld and payouts.

  From the calendar (iCal) links you connect, we read booking dates and the limited details the platform includes in the feed. We do not log in to your Airbnb or Vrbo account.

• Stripe. Stripe tells us the status of your subscriptions and payments. We never receive or store your full card number.

2.3 Information from Service Providers

When a Service Provider receives a message through BnbWise, we record:

• their consent (YES), opt-out (STOP) and opt-back-in (START) replies, and when they happened;
• the text of any reply to a message that is waiting for an answer, which is shown to the host who sent it.

We do not receive photos or other media they send.

2.4 Information collected automatically

• Website and app analytics. We run our own simple, first-party analytics. When you visit a page we record:
  • the page;
  • the website that referred you, as a domain only;
  • an approximate location (country, region and city) that our hosting provider derives from your IP address;
  • a random visitor ID stored in your browser.

  We do not store the IP address for analytics. We do not use Google Analytics.

• Advertising measurement. Our websites and the app carry the Google Ads tag, which tells us whether our Google ads bring people to BnbWise and whether they go on to subscribe. When you visit a page, Google receives the page address, your IP address and browser information, and sets its own cookies, under Google’s privacy policy. When a new account’s trial or subscription starts, we also tell Google that a sign-up happened. We never send Google your name, email, payment details or anything stored in your account.
• Security and service logs. Our servers process your IP address, browser information and request details to deliver the service, prevent abuse (for example, rate-limiting our contact form) and fix errors. These may appear in server logs.
• Push notifications. If you allow notifications, your browser gives us a push subscription for that device.

3. How we use AI

BnbWise uses AI models to do the work you ask it to do:

• reading and categorizing bank statements and bank transactions;
• grouping recurring payments during the Teach Me setup;
• producing forecasts;
• answering questions in the help assistant.
• These models run on Amazon Bedrock, a service of Amazon Web Services, in the United States. The models are made by Anthropic and Amazon, and they run inside AWS.
• What we send:
  • Statements and transactions: the contents of your statement files or bank transactions, with the categorization rules you’ve taught BnbWise.
  • Forecasts: monthly totals only.
  • Help assistant: your question, recent messages in that chat, and passages from our help documentation. No account data.
• We do not use your information to train AI models.
• Statement files are not stored as files. Their contents are processed, and the results are kept for up to one hour so you can review them. Only the transactions you confirm, and a note of the import (file name and counts), are saved.
• Help assistant conversations are not stored on our servers. Your five most recent conversations are kept in your own browser so you can reopen them, and are cleared when you sign out.

4. How we use information

We use personal information to:

• Provide the Service, including:
  • creating and securing your account;
  • importing and organizing your transactions and reservations;
  • producing reports;
  • running your tasks and automations;
  • sending the messages you set up.
• Keep it secure:
  • sign-in and two-step verification codes;
  • detecting and preventing fraud, abuse and spam;
  • enforcing our Terms, including our messaging rules.
• Bill you through Stripe.
• Communicate with you:
  • service notifications you turn on;
  • answers to support requests;
  • notice of changes to our Terms, this policy or your subscription;
  • news about BnbWise, such as new features and improvements;
  • requests to review BnbWise;
  • offers and promotions, including referral programs.
• Support and improve the Service:
  • fixing problems;
  • learning from the reasons people give for closing their account;
  • understanding which pages are used, from aggregate analytics.
• Comply with the law, and protect our rights and the rights of others.

We do not sell personal information, and we never share the information in your account for advertising. The only advertising technology we use is the Google Ads tag described in Section 2.4. We send news, review requests and offers by email only, never by text message. Every one of these emails has an unsubscribe link. They are optional: you can refuse them at any time, and doing so does not affect your use of BnbWise or stop emails about your account, billing or security. We do not use your financial data to build profiles, and we do not combine it across accounts. For example, what BnbWise learns about categorizing your transactions is used only for your own properties.

Legal bases (EEA, UK and similar laws). We rely on:

• performing our contract with you, to provide the Service;
• our legitimate interests, to secure and improve the Service, to keep opt-out records, and to email you news, review requests and offers about BnbWise, which you can refuse at any time;
• legal obligation, for tax and billing records and opt-out compliance;
• consent, for text messages and push notifications, which you can withdraw at any time.

5. How we share information

We share personal information only as described here.

Service providers (subprocessors). They process information on our behalf and only to provide their service to us:

Our websites also load fonts from Google Fonts and code libraries from cdnjs (Cloudflare) and jsDelivr. When your browser requests these files, those providers receive your IP address and browser information. When you use the payment and bank-linking forms, Stripe and Plaid may set their own cookies for fraud prevention, under their own privacy policies. Our websites and the app also load the Google Ads tag described in Section 2.4.

Others, when you direct it. When you send a message to a Service Provider, that person receives its content. Your name is shown in the request asking them to confirm.

Legal and safety. We may disclose information if we believe in good faith that it is required by law, subpoena or other legal process, or needed to protect the rights, property or safety of BnbWise, our users or others. We may also disclose it to investigate fraud or misuse of our messaging features.

Business transfers. If BnbWise is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal, and this policy will continue to apply to it.

6. Your mobile information and text messaging

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
• One consent per number, shared across BnbWise. A Service Provider confirms by replying YES the first time any host asks. That confirmation, and any later STOP, applies to that number and channel for every BnbWise host. This means:
  • one reply of STOP stops messages from everyone on BnbWise;
  • a person who has confirmed isn’t asked again by each new host.
• Opt-out records are kept permanently. To honour opt-outs, we keep a record of each phone number’s consent status on each channel, with the dates it was requested, confirmed or withdrawn and which account last asked. We keep this even after the contact or the host’s account is deleted. Without it, a person who said STOP could be messaged again.
• To stop messages, reply STOP to any BnbWise message. Reply START to opt back in. Hosts can also turn off their own text reminders in Settings. Message and data rates may apply. See our SMS & Messaging Terms.

7. Cookies and browser storage

BnbWise itself does not set cookies. We use your browser’s local storage for things the Service needs:

• keeping you signed in;
• remembering a trusted device for two-step verification;
• your language, selected property and whether you’ve seen the welcome tour;
• your recent help conversations;
• the random analytics visitor ID.

You can clear this at any time in your browser settings. Doing so signs you out.

Stripe and Plaid may set their own cookies when you use their forms, as noted above. Google sets advertising cookies through the Google Ads tag (Section 2.4). You can block them in your browser, or limit how Google uses them for ads at adssettings.google.com. We do not currently respond differently to “Do Not Track” or Global Privacy Control signals.

8. How long we keep information

Closing your account. When you close your account in Settings, we do the following immediately:

• cancel your subscriptions;
• disconnect your banks and calendars;
• permanently delete your account and all the data stored under it from our live systems.

The one exception is your reason for leaving. If you write one when you close your account, we keep it with your name and email address so we can learn from it. If you leave it blank, we keep nothing. To have it deleted, email us.

Copies remain in our encrypted backups for up to 35 days and are then overwritten. We keep only what the table above says we keep after closure.

Locked accounts. If your free trial ends without a subscription, a payment stays unpaid, or your subscription ends, your account is locked and its bank connections are removed. If it stays locked for one year, we permanently delete its data.

9. How we protect information

• All connections to BnbWise are encrypted (HTTPS/TLS), and all stored data is encrypted at rest.
• Each host’s data is stored separately and is accessible only through that host’s verified sign-in.
• Passwords are hashed by our authentication provider. Two-step verification by text message is available.
• Messages from our bank-connection and messaging providers are verified before we act on them.
• Access by our staff is restricted, as described in Section 10.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as required by law.

10. Access by BnbWise staff

Only authorized BnbWise personnel can access account data, and only to:

• provide support you ask for;
• investigate a problem, suspected abuse or a security issue;
• comply with the law.

This access:

• is read-only;
• requires a password and a one-time security code;
• is limited to one account for 15 minutes at a time;
• is recorded in an audit log.

We do not ask for your permission or notify you before or after such access.

11. Your rights and choices

Everyone who uses BnbWise can:

• Access and correct their information. Most of it can be viewed and edited directly in the app.
• Delete it. Delete individual records at any time, or close your account in Settings.
• Get a copy. Download reports from the app. For a copy of other information we hold about you, email us.
• Control communications. Turn off push notifications and text reminders in Settings, reply STOP to any text, or use the unsubscribe link in any news, review or offer email.

Depending on where you live, you may also have the right to:

• object to or restrict certain processing;
• withdraw consent;
• data portability;
• appeal a decision we make about your request;
• complain to your data-protection authority.

This includes:

• residents of California and other U.S. states with privacy laws;
• the EEA, UK and Switzerland;
• Mexico: your ARCO rights of access, rectification, cancellation and opposition, under the Federal Law on the Protection of Personal Data Held by Private Parties.

To make a request, email support@bnbwise.app from the address on your account. We may need to verify your identity. We will respond within the time the law requires, and within 30 days in all cases. We will not treat you differently for exercising your rights.

Service Providers and guests. If a host added your information to BnbWise, please contact that host first, since they control it. You can also email us, and we will pass your request to the host or help directly where we can. To stop text messages at any time, reply STOP.

12. International transfers

BnbWise is operated from the United States, and all information is stored and processed there. If you use BnbWise from another country, including Mexico, the EEA or the UK, your information is transferred to the United States, where privacy laws may differ from those in your country. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the Standard Contractual Clauses in our providers’ data processing agreements.

13. Children

BnbWise is a business tool for adults and is not directed to children under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as BnbWise changes. For material changes, we will notify you by email or in the app before they take effect. The effective date at the top shows the current version.

15. Contact us

Questions, requests or complaints about privacy:

support@bnbwise.app

BnbWise — short-term-rental accounting and automation for hosts. Contact: support@bnbwise.app.