Your data on Spitio

Who we are

Spitio is run from Athens, Greece, and is responsible for your data. Write to us at info@spitio.com.

What we collect

• E-mail address, password, name, phone numberWhen you create an accountTo sign you in and to reach you about your bookings. Your password is stored scrambled by our sign-in service; nobody at Spitio can read it.
• Profile photo, a few words about you, languages, where you liveOnly if you add themShown on your profile, so guests and hosts know who they deal with.
• Name, e-mail, phone, country, number of guests and pets, your message to the hostWhen you book a staySo the host can prepare your stay, and because Greek law asks hosts to register their guests.
• Stay dates, prices, payment and cancellation statusWhen you book, pay, change or cancelTo run the booking, refunds and the host's records.
• Messages between guests and hostsWhen you write in MessagesTo deliver them. Before a stay is confirmed, e-mail addresses, phone numbers and links in messages are hidden.
• ReviewsWhen you write one after a stayShown on the listing with your first name.
• Name, e-mail, message, attachments, booking referenceWhen you write to us through ContactTo answer you.
• Signs of misuse: repeated cancellations, chargebacks, failed payments, hosts' reports; and, if an account is banned, a scrambled (hashed) form of its e-mail, phone and Google accountWhen they happen; the hashes only when the team bans an accountTo keep hosts and guests safe from fraud. The team decides; nothing is banned automatically. The hashes stop the same details opening a new account, and stay if the account is later deleted.
• E-mail address (hosts: also number of homes, region and notes)When you join the waiting listTo tell you when Spitio opens.
• The home's address, position, photos, description, AMA number, calendar links; payout and subscription detailsWhen you list a home (hosts)To publish the listing, keep its calendar up to date, bill the subscription and pay you out.

Visit statistics. We count page views and searches (place, dates, number of guests) with an anonymous code that changes every day. We never store your IP address for this and use no cookie. We also note the country your visit came from and, for links from other sites, only that site's name. Host, admin and sign-in pages aren't counted.

We count page views without cookies and without storing IP addresses, to show hosts how their listings perform.

Security. To stop abuse, such as too many sign-in attempts, our servers keep your IP address in memory for a few minutes. It isn't written to our database.

What others can see

Host profiles show the name, photo, a few words, languages, where the host lives and since when they host. Never their phone number or e-mail. A home's listing shows its AMA number, as Greek law requires, and its position on the map to within about 300 m; the host gives the exact address to their guest once a stay is booked. Reviews show the writer's first name.

Who we share it with

Only with the host of your stay, and with the services that run parts of Spitio for us:

• The host of your stayYour bookingYour name, e-mail, phone, country, guests and message, and the booking itself.
• SupabaseOur database, sign-in and file storageEverything listed above, stored on our behalf.
• VercelHosts the websiteEvery visit passes through it, with your IP address and browser.
• StripeCard payments, host payouts and subscriptionsGuests: name, e-mail, amount, home and dates. Hosts: name and e-mail. Card details go straight to Stripe and never pass through Spitio.
• ResendSends our e-mailsYour e-mail address and the e-mail's content (for a new message, its first 200 characters).
• OpenStreetMap (Nominatim)Finds a home on the mapThe home's address, sent from our server when a host saves it.
• OpenFreeMap and OpenStreetMapMap imagesYour browser loads the map pictures from them, so they see your IP address.
• Google sign-in“Continue with Google” on Sign in · only if you use itGoogle tells us your name, e-mail and profile picture, and knows you signed in to Spitio.
• Google FontsThe font on the card payment formYour browser loads it from Google, so Google sees your IP address.
• Jina ReaderImports a listing a host already has elsewhereOnly the address of that public Airbnb or Booking.com page, when the host asks for an import.
• Google AnalyticsVisit statistics · only with your consentPages visited, searches and bookings, with ids and amounts. No names, e-mails or phone numbers.
• Meta and Google AdsAdvertising · only with your Marketing consentWhat the cookies page describes. For Meta, also your e-mail and phone in scrambled (hashed) form, IP address and browser, when you book, sign up, subscribe or write to us.

Some of these companies are based in the United States. Cookies and advertising are explained on the cookies page.

Why we are allowed to

• To carry out what you asked for: your account, bookings, payments, messages and listings.
• Because the law requires it: guest details for the host's registration, the AMA number, payment and tax records.
• Our legitimate interest: keeping Spitio safe and counting visits anonymously.
• Your consent: Google Analytics, Meta and Google Ads. You can withdraw it at any time.

How long we keep it

Your account stays until you delete it. Bookings stay with the host after that, because hosts need them for their own records. Your cookie choice lasts 12 months. For anything else, write to us and we will tell you, or delete it where the law lets us.

Changes

When Spitio starts doing something new with your data, this page changes first, with a new date at the top.