Privacy
Flakk ehf. (kt. 123456-7890, Laugavegur 10, 101 Reykjavík) is the data controller for your Flakk account and the data processor for your guests' personal data processed through Flakk.
What we collect
- Account data: your name, email, phone, property details.
- Billing data: invoicing details, bank or card metadata (card numbers themselves live with our PCI-DSS Level 1 payment processors, not with us).
- Guest data (processed on your behalf): names, contact details, booking details, communications routed through Flakk.
- Usage data: pages visited, features used, errors encountered — for improving the Service.
Why we process it
- Provide the Service you signed up for.
- Bill you for the Service.
- Comply with Icelandic bookkeeping law (7-year retention of accounting records).
- Respond to legal requests we are compelled to answer.
Where it lives
Guest data and account data are stored in the European Union (Amsterdam, Frankfurt). Backups are encrypted at rest and in transit. We do not transfer guest data outside the EEA except to specific sub-processors (Stripe, Google, Twilio) listed on this page.
Your rights (GDPR)
You can request access, correction, export, or deletion of your personal data by emailing privacy@flakk.app. We respond within 30 days. If you're unhappy with our response, you can complain to Persónuvernd (the Icelandic Data Protection Authority).
Guest data
For data belonging to your guests, Flakk acts as a processor and you as the controller. Our Data Processing Agreement is attached to every subscription at signup. Guests who want their data deleted should contact you directly; you action it in Flakk and we remove it within 30 days.