Privacy Policy

APHORIA is operated by Mikers-Group DOOEL, Brakja Miladinovi 21-1, Strumica, Strumica, North Macedonia. For any privacy question or request, contact us at kikostojanov4466@gmail.com.

For host accounts, subscriptions and our own website, we decide how and why personal data is used. We are the data controller.

When a guest sends a reservation request through a property website, the host decides how that guest's data is used. The host is the data controller and we process the data on the host's behalf, as described in the data processing section of our Terms of Service. Guests who want to exercise their rights should contact the host; if you contact us instead, we will pass your request on.

• Host account: name, email address, phone number, sign-in details managed by our authentication provider, and preferred language.
• Property content: descriptions, addresses, photos, prices and the contact details a host chooses to publish.
• Subscription and billing: plan, subscription status, billing period and the customer reference from our payment provider. Card details are entered directly with Stripe; we never see or store full card numbers.
• Reservation requests: the guest's name, email address, phone number, message, travel dates, number of guests and language, together with the reservation reference and status.
• Emails: the booking and account emails we send, and whether delivery succeeded.
• Technical data: IP address, browser information and request logs, processed by our hosting providers to deliver the service and keep it secure. We use your approximate country, derived from your IP address, only to choose a language for the page; we do not store it.

• To provide the service you signed up for: your account, websites, reservations, emails and subscription (performance of a contract, Art. 6(1)(b) GDPR).
• To keep accounting and tax records (legal obligation, Art. 6(1)(c) GDPR).
• To protect the service against abuse, fraud and security incidents, and to fix errors (legitimate interests, Art. 6(1)(f) GDPR).

We do not sell personal data, do not use it for advertising, and do not send marketing emails. We do not use analytics or tracking tools.

We use carefully selected providers who process data only on our instructions:

• Clerk: host sign-in and account security.
• Convex: database, file storage and backend processing.
• Vercel: website hosting and content delivery.
• Stripe: subscription payments and invoices.
• Resend: delivery of booking and account emails.

Hosts receive the reservation data guests send them. We may disclose data to authorities when the law requires it.

Some of these providers process data in the United States. Where data leaves the European Economic Area or North Macedonia, we rely on the EU-U.S. Data Privacy Framework for certified providers or on Standard Contractual Clauses approved by the European Commission.

We keep host account data for as long as the account exists. When an account is closed, we delete it within 30 days, except billing records that tax and accounting law requires us to keep for longer.

Guest and reservation data is kept for the host while the host's account exists, or until the host asks us to delete it.

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. To use these rights, email kikostojanov4466@gmail.com. We respond within one month.

You can also complain to a data protection authority: {authority}, or the authority in the country where you live.

All traffic is encrypted with HTTPS. Access is limited by account: every host sees only their own properties, reservations and guests. Our providers maintain industry-standard security certifications.

APHORIA is not directed at children. Host accounts are for people aged 18 or over.

We will update this page when our practices change and show the date of the latest version at the top. We will tell hosts about significant changes by email or in the dashboard.