Privacy notice

This notice explains what personal data Arrivo collects, why, and what you can ask us to do with it. It covers this website and the Arrivo app used by landlords, their teams and their guests.

Who we are

Arrivo is a software service for holiday-rental landlords, based in Valletta, Malta. For questions about this notice or your data, email hello@arrivo.today.

This website

• Contact form. When you send a message we receive your name, email address and anything else you choose to give us (company, number of units, topic, message). We use it to reply and to follow up on your request, and delete it two years after our last contact.
• Server logs. Our hosting keeps standard request logs, including IP addresses, for security and troubleshooting, for a short period.
• Fonts. Pages load fonts from Google Fonts, so your browser connects to Google’s servers, which receive your IP address.
• No tracking. This website does not use analytics, advertising cookies or tracking pixels.

The Arrivo app

Landlords use Arrivo to check in their guests. For guest data, the landlord is the controller and Arrivo acts as their processor, under a data processing agreement that forms part of our terms.

• Landlord accounts: name, email, company details and billing information, used to provide and bill the service.
• Signing in with Google: if you choose “Continue with Google”, Google shares your name, email address and profile picture with us, and confirms that the email address is yours. We use them only to create and sign in to your account. We don’t get your Google password or access to anything else in your Google account.
• Guest check-in: name, email, phone, nationality, ID document type and number, expected arrival time and, where the landlord requires it, a photo of the ID. ID photos are stored privately and are only available to signed-in members of that landlord’s team.
• Payments: guests pay through the landlord’s own payment provider (such as Stripe or Revolut Business). Card details are entered on the provider’s page and never reach Arrivo. We store the payment status and amount.
• TV screens: show the guest’s first name and stay dates during their stay only.

Where data is stored

The Arrivo app and its database run on servers in Frankfurt, Germany. These providers process data for us:

• DigitalOcean hosts the app, its database and uploaded files (Frankfurt, Germany).
• Cloudflare serves this website, manages our domain and forwards email sent to our address.
• Resend sends the app’s emails, such as check-in links and confirmations (from the EU, Ireland).
• Stripe processes landlords’ subscription payments to Arrivo.
• Google confirms your identity if you choose to sign in with Google.

Where a provider processes data outside the EU, we rely on the safeguards the GDPR requires, such as standard contractual clauses.

How long we keep it

• Guest check-in data stays in the landlord’s account until the landlord deletes it or asks us to close the account. We then delete it within 30 days.
• Spreadsheets uploaded to import bookings are deleted as soon as the import runs, or after one day if it never does.
• Landlord accounts are kept while the account is open. Invoices and payment records are kept for as long as tax and accounting law requires.
• Contact form messages are deleted two years after our last contact.

Your rights

You can ask to see, correct, delete or export your personal data, or object to how we use it. If you were a guest, you can also contact the landlord you stayed with, since they decide how your check-in data is used. If you are not happy with our answer, you can complain to the Information and Data Protection Commissioner in Malta.

Changes

We will update this page when our practices change and show the date of the latest version at the top.