This Privacy Policy explains how Jedro Labs LLC (“we”, “us”), a Wyoming limited liability company, collects, uses, and protects personal data when you use Villanote (https://villanote.com) - as a host who builds a guide, as a guest who reads one, or as a visitor who tries the product. We are the data controller for that processing. Contact us any time at hello@villanote.com.
1. Data we collect
- Host account data - your email address and authentication details (passwords are stored only as salted hashes; we never see them), plus the sign-in history shown in your own security settings (time, IP address, device type).
- Guide content - the texts, photos, contact details and links you publish for your guests. Anything in a published guide is visible to whoever holds its link (and passcode, where you set one) - do not put guests' personal data in a guide.
- Your guest list - if you use the Guests feature, the details you add about your guests (name, email or phone, language, stay dates, marketing-consent status, and any tags or notes) are stored in your account so you can reach them with their consent. For this data you are the controller and we act as your processor under our Data Processing Agreement; we process it only to provide the Service and on your instructions, and delete it when you delete the guest or your account. Please record a guest's marketing details only where you have their consent, and do not put special-category data (such as health) in guest notes.
- Guest technical data - when a guest opens a guide we process the usual server data (IP address, browser type) to deliver the page and protect it from abuse; where a guide has a passcode, one cookie remembers that it was entered. We count how often a guide and its sections are opened, by language and device type - counts only, in our own database, never profiles, and never with third-party analytics or advertising trackers.
- Listing imports - when you fill a guide from your listing, the listing text, link or files you provide are used to write a draft into your own guide and are kept with it; we never copy listing photos.
2. How we use your data
We use your data to provide and operate the Service, publish and translate your guide, generate the drafts you ask for, authenticate you, process your subscription, keep the Service secure, respond to support requests, and comply with our legal obligations. We do not sell your personal data, and we do not use your content to train third-party AI models.
3. Legal bases (GDPR)
Where the GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service and to deliver guides to guests), consent (for marketing, where used), and legal obligation (e.g. tax and accounting).
4. AI processing
When you ask for a draft guide or a translation, the texts (and any documents or screenshots) you provide are sent to our AI providers - Anthropic and Google (Gemini) - for processing. They act as our processors under contract and are not permitted to use your content for their own purposes or to train their models.
5. Service providers (sub-processors)
We share data only with providers that help us run the Service, under agreements that require them to protect it:
- Render - application hosting (Frankfurt, Germany)
- Neon - managed PostgreSQL database (Frankfurt, Germany)
- Brevo - transactional email (sign-in codes, notices)
- Cloudinary - storage and delivery of the photos in your guide
- Stripe - payments, billing and tax, as merchant of record; it receives the data needed to complete your purchase
- Anthropic and Google (Gemini) - AI drafting and translation
When you process your guests' personal data with Villanote, our Data Processing Agreement (GDPR Article 28) governs that processing: it names Jedro Labs LLC as your processor and lists the sub-processors above. Email hello@villanote.com if you need a signed counterpart for your records.
6. International transfers
Our application and database are hosted in Frankfurt, Germany (EU). Some providers process data in the United States. Where data is transferred internationally, we rely on appropriate safeguards (such as the EU-US Data Privacy Framework and standard contractual clauses) as required by law.
7. Security
Passwords are hashed with bcrypt; sessions can be reviewed and revoked from your security settings; an emailed sign-in code can be required for every sign-in; all traffic is encrypted in transit (HTTPS). Every host sees only their own account's properties, and that isolation is covered by our automated tests. No system is perfectly secure, but we work to protect your data using industry-standard measures.
8. Data retention
We keep your personal data for as long as your account is active. If you delete your account, your guides and personal data are deleted within a reasonable period, except where we must retain certain records (for example, billing records) to meet legal obligations. Guide-open counts are kept for up to 400 days. Your guest list is kept while you keep it - you can delete an individual guest at any time, and deleting your account erases the whole list; because keeping it is your decision as its controller, we do not delete it on a fixed schedule (see the DPA).
9. Your rights
Depending on where you live (including under the GDPR and the CCPA), you have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. You can export your guide from within the app and delete your account yourself. To exercise any right, email hello@villanote.com. We do not sell personal information, and we will not discriminate against you for exercising your rights.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, provide additional notice where appropriate.
12. Contact
Questions or requests about your privacy? Email hello@villanote.com.