Privacy policy

Last updated: August 2026

Baya B.V. ("Baya", "we") provides a platform for rental and property management: the web application at app.bayamanager.com, this website, and the mobile apps for iOS and Android ("Baya Manager"). This policy explains which personal data we process, why, and what rights you have.

Who is responsible?

For data about our own users (accounts, contact with us, this website), Baya B.V. is the data controller. For data our customers enter into or receive through the platform — such as guest, tenant and booking data — the customer is the controller and Baya acts as a processor. We enter into a data processing agreement with our customers for this.

What data do we process?

• Account data — name, email address, phone number, organisation and login credentials (passwords are never stored in readable form).
• Booking and guest data — names, contact details, stay and payment information entered by customers or received through connected channels (such as booking platforms).
• Messages — guest communication through connected channels (including email, WhatsApp, SMS and the guest portal), so it comes together in one inbox.
• Receipts and documents — photos and files you upload. Receipts are stored end-to-end encrypted; only your organisation can read them, we cannot.
• Device and app data — when using the mobile app: a push notification token and the platform (iOS or Android). The app only uses the camera when you photograph a receipt; photos are not used for anything else.
• Technical data — log files (IP address, timestamps, errors) for security and keeping the service running.

Why do we use this data?

• Providing the platform: bookings, communication, administration and reporting.
• Push and email notifications, for example when a new message arrives. You can turn notifications off in the app or on your device.
• Security, abuse prevention and improving the service.
• Complying with legal obligations (such as tax retention requirements).

We do not sell personal data and do not use it for advertising or third-party tracking. Phone numbers and SMS/WhatsApp consent (opt-in) are used solely for transactional messages about a stay or booking; this data is never shared with third parties for marketing purposes. You can opt out at any time by replying STOP.

Who do we share data with?

Only with service providers needed to deliver the platform, such as EU-based hosting providers, Google Firebase for delivering push notifications on iOS and Android, and the booking and communication channels you connect yourself. We sign data processing agreements with our processors. Where processing takes place outside the EEA, appropriate safeguards such as EU Standard Contractual Clauses apply. A complete list of our sub-processors (including hosting, messaging, payments and channel synchronisation) can be found in Annex 2 of our data processing agreement.

How long do we keep data?

As long as needed for the purpose it was collected for: account data for the lifetime of the account, customer data for the duration of the customer agreement (after which it is deleted or returned), and log files briefly and purpose-bound. Statutory retention periods may require longer.

Security

Connections are encrypted (TLS), data is stored encrypted, access is role-based and receipts are end-to-end encrypted. No system is 100% secure, but our technology and processes are built around this.

Your rights

You have the right to access, rectify, erase, restrict, port and object. Email us at info@bayamanager.com; we respond within 30 days. If your data is processed by one of our customers (for example as a guest), please contact that property manager; we assist them where needed. You can also lodge a complaint with your data protection authority.

Contact

Baya B.V. · info@bayamanager.com · +31 85 130 0656

If we change this policy, we will publish the new version on this page.