Legal
Privacy policy
Last updated: June 2026
Data controller
CanaryFlow, controller Hugo Almaguer Mendoza. You can contact us at hola@canaryflow.es.
Purpose
To manage WhatsApp conversations with vacation rental guests: receive messages, generate automatic replies and allow the owner or manager to step in when needed.
Data we collect
- Guest or contact phone number
- WhatsApp message content
- Property data (name, address, FAQs, check-in instructions, etc.)
Legal basis
User consent when contacting via WhatsApp and performance of the service contract between CanaryFlow and the owner or manager.
Retention
Data is kept for the duration of the contractual relationship and, where applicable, as long as needed to meet legal obligations.
GDPR rights
You may exercise your rights of access, rectification, erasure, portability, restriction and objection by writing to hola@canaryflow.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
Use of artificial intelligence
Messages may be processed by artificial intelligence models (OpenAI) to generate automatic replies. Only the data needed to answer the guest's query is sent.
Third parties
- Meta (WhatsApp) — sending and receiving messages
- OpenAI — message processing for automatic replies
- Railway — application hosting
- Stripe — subscription payment processing
Contact
For any privacy-related enquiry: hola@canaryflow.es