Legal

Privacy policy

Last updated: June 2026

Data controller

CanaryFlow, controller Hugo Almaguer Mendoza. You can contact us at hola@canaryflow.es.

Purpose

To manage WhatsApp conversations with vacation rental guests: receive messages, generate automatic replies and allow the owner or manager to step in when needed.

Data we collect

  • Guest or contact phone number
  • WhatsApp message content
  • Property data (name, address, FAQs, check-in instructions, etc.)

Legal basis

User consent when contacting via WhatsApp and performance of the service contract between CanaryFlow and the owner or manager.

Retention

Data is kept for the duration of the contractual relationship and, where applicable, as long as needed to meet legal obligations.

GDPR rights

You may exercise your rights of access, rectification, erasure, portability, restriction and objection by writing to hola@canaryflow.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Use of artificial intelligence

Messages may be processed by artificial intelligence models (OpenAI) to generate automatic replies. Only the data needed to answer the guest's query is sent.

Third parties

  • Meta (WhatsApp) — sending and receiving messages
  • OpenAI — message processing for automatic replies
  • Railway — application hosting
  • Stripe — subscription payment processing

Contact

For any privacy-related enquiry: hola@canaryflow.es

Privacy policy — CanaryFlow