Scope
This notice explains how Covilio processes personal data when you visit the website, create an account, publish property content, send booking-related requests, or otherwise interact with the platform.
The notice applies to website visitors, registered users, hosts, guests, and people who contact Covilio for support or operational matters.
Categories of personal data
Depending on how you use the service, Covilio may process:
- identity and contact data, such as name and email address
- account data, such as login details and profile information
- property and listing data, including information, images, descriptions, and other content submitted to publish or manage a property page
- booking and communication data, including requests, messages, and operational interactions made through the platform
- payment-related data required to complete transactions, noting that payment card processing is handled by Stripe
- technical and security data, such as IP address, browser type, device information, and access logs
How we use personal data
Covilio may use personal data to:
- create, maintain, and secure user accounts
- publish, update, and manage property listings
- process booking flows, requests, and related communications
- provide customer support and respond to operational inquiries
- detect abuse, prevent fraud, and protect the platform
- comply with legal, regulatory, tax, accounting, and contractual obligations
Third-party services and data sharing
Covilio may share personal data only where necessary to operate the service or comply with legal obligations.
This may include:
- Stripe, for payment processing and transaction-related services
- Google reCAPTCHA, to help protect forms, accounts, and the platform from abuse or automated misuse
- hosting, infrastructure, analytics, security, and support providers acting on Covilio's instructions
- competent authorities or advisors where disclosure is required by law or reasonably necessary to protect legal rights
Covilio does not sell personal data to third parties.
Public content
Information that hosts or users choose to publish on property pages may become publicly visible on the website. Users should avoid including unnecessary personal data in public-facing fields or content.
Data retention
Covilio keeps personal data only for as long as reasonably necessary for the purposes described in this notice, including service delivery, account administration, dispute handling, security monitoring, and legal compliance.
Retention periods may vary depending on the type of data and whether Covilio must keep specific records to satisfy tax, accounting, contractual, or regulatory requirements.
Security
Covilio uses reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
No system can be guaranteed to be completely secure, but access controls, monitoring, service-level protections, and third-party security tools are used to reduce risk and support platform integrity.
User rights
Users may request:
- access to their personal data
- correction or update of inaccurate information
- deletion of personal data, subject to any legal or operational retention requirements
- information about how their data is processed
Privacy-related requests should be submitted through Covilio's official support or account communication channels.
Updates to this notice
Covilio may update this privacy notice from time to time to reflect product, operational, or legal changes. The version published on the platform is the current reference version.