1. Data Controller
The controller of your personal data is Next11 AI Agency SAS, developer of the HostRest360 platform, available at https://hostrest360.com. To exercise your rights or make privacy-related inquiries, you can contact us at hola@next11.co.
2. Data We Collect
We collect the following types of information:
- Registration data: name, email address, property name, country and billing details.
- Usage data: interactions with the platform, features used, access frequency and performance metrics.
- Communications data: messages processed through the integrated channels (WhatsApp, Airbnb, Booking.com) solely for the purpose of providing the service.
- Technical data: IP address, browser type, operating system, device identifiers and session cookies.
- Guest data: booking information and guest communications of the property, processed by Next11 AI Agency SAS as a data processor on behalf of the Client.
3. Purposes of Processing
We use your data to:
- Provide, maintain and improve the Service.
- Manage your account and subscription.
- Process payments and issue invoices.
- Send communications about the Service, updates and technical support.
- Comply with legal and regulatory obligations.
- Analyze Service usage to improve the user experience (anonymized/aggregated data).
4. Legal Basis for Processing
The processing of your data is based on:
- Contract performance: to provide the Service in accordance with the accepted Terms.
- Legitimate interest: to improve the platform, ensure security and prevent fraud.
- Legal obligation: to comply with applicable tax, accounting and regulatory rules.
- Consent: for sending marketing communications (revocable at any time).
5. Sharing with Third Parties
Next11 AI Agency SAS does not sell or rent your personal data to third parties. We may share data with:
- Service providers: payment processors, cloud hosting services, analytics and communication tools, under data processing agreements that guarantee confidentiality.
- Competent authorities: when required by law, a court order, or to protect the rights of Next11 AI Agency SAS and its users.
- Successors in the event of a merger or acquisition: with prior notice to the Client.
6. International Transfers
Some of our technology providers may be located outside Colombia. In such cases, we ensure that transfers are carried out with adequate safeguards (standard contractual clauses, service level agreements with privacy commitments) and in compliance with Colombian Law 1581 of 2012 and related regulations.
7. Cookies and Tracking Technologies
We use first-party and third-party cookies to ensure the operation of the Service, remember your preferences and analyze platform usage. You can manage cookie preferences from your browser settings; however, disabling certain cookies may affect the functionality of the Service.
8. Retention Period
We retain your data while your account is active or for as long as necessary to provide the Service. After account cancellation, we will delete or anonymize your data within a maximum of 90 days, unless the law requires a longer retention period (for example, tax records).
9. Your Rights
In accordance with applicable law, you have the right to:
- Access: know which of your personal data we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data when it is no longer necessary.
- Objection and restriction: object to processing or request its restriction in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Withdrawal of consent: withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, write to us at hola@next11.co. We will respond within a maximum of 10 business days.
10. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure. This includes encryption in transit (TLS) and at rest, two-factor authentication for administrative access, and periodic security audits.
11. Changes to this Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or through a notice on the platform at least 15 days in advance.