Name, email, phone number, business account name, account type, address and data needed to manage properties. This data is used to operate the platform, provide support, security and meet legal obligations.

Property name, unit name, location, rules, check-in/check-out information, availability, prices, descriptions, images, QR codes, iCal links for Booking and Airbnb sync and information the host enters to display to guests.

Name, email, phone number, data related to the stay, reservations, cancellations, use of the QR guest app and communication with the host or support.

Data on reservation cancellations and blocking of guests who cancel repeatedly, in line with platform rules and host settings.

User queries, AI responses, host instructions for the property and context needed for AI reception to help guests during their stay. AI reception processes data only within instructions set by the host.

Images, video, descriptions and other content that a user or host voluntarily publishes or adds to the platform.

IP address, device type, access time, language, basic technical information and interactions with the platform for security, stability, abuse prevention and basic analytics.

We use data for user accounts, property management, Cash Booking profiles, the QR guest app, AI reception, reservations, calendar sync, communication and technical support.

Reservations are free — no commission on the stay. Subscription is charged for AI reception, video feed and marketing tools.

Guests pay the host directly on arrival. Zvizz does not process or store stay payment data.

Data is used to charge subscription via Stripe. Card data is processed through Stripe; Zvizz does not see the full card number.

Data entered by the host is used so AI reception can give useful, practical and relevant answers to guests about the specific property. The AI system for processing queries is Mistral AI.

We may send email notices about your account, property, reservations, subscription, security and important platform changes.

We use technical data to protect users, detect suspicious activity, prevent reservation abuse and maintain platform stability.

We do not sell your personal data to advertisers or other third parties.

Data is retained while you are a registered user and for 30 days after account deletion, unless a legal obligation requires longer retention.

Reservation and subscription data is retained in line with statutory periods, including tax and accounting obligations under applicable law.

Data is retained while the property is active on the platform or until the host deletes it, except where linked to legal obligations that must be retained.

Host instructions and AI reception content are retained until the host changes or deletes them or while the property is active, unless longer retention is required for security or legal reasons.

Media content is retained while published or needed to display the property, unless the user deletes it or requests deletion.

12 months.

3 months.

Up to 2 years, depending on cookie type and user settings.

Subscription payment data is not stored on our servers in full form. It is retained only through Stripe infrastructure, in line with their privacy and security rules.

We use SSL/TLS for data transfer and security measures to protect data in the system.

Authentication and protection of user accounts are carried out through platform security mechanisms and infrastructure providers.

Stripe processes subscription payments. Zvizz does not see the full card number or store stay payment data.

Data is processed through protected server processes and controlled access, applying the principle of least privilege.

Only authorised persons have access to personal data when necessary for support, security, legal obligations or platform operation.

Data is processed through infrastructure and database services (Supabase and similar) that enable platform operation, data storage, authentication and security.

Stripe processes card data for host subscription. Zvizz does not see card data in full form.

We use a specialised email service (such as Resend or another certified provider) to send transactional and notification emails.

We use a maps and location service (such as Google Maps or another provider) to display properties and approximate location information.

Images and video may be stored, processed and distributed through media and CDN infrastructure services.

We use Mistral AI to process AI reception queries and structure host instructions. Queries and responses are processed via the Mistral API in line with their privacy and security rules.

We use DNS, CDN and security services for availability, speed and platform protection.

The application may be hosted and deployed on third-party infrastructure services that offer an appropriate level of data protection.

In some cases data may be processed outside the EEA (e.g. Stripe, Mistral AI and other processors). We then rely on EU standard contractual clauses, encryption and the necessity of processing to provide the service.

For details on all processors and applicable agreements, contact us at info@zvizz.com.

Processing is necessary to provide the service: user account, Cash Booking profile, reservations, QR guest app, AI reception, subscription, support and property management.

We must retain certain data for tax, accounting, security or other legal obligations.

Marketing communications, certain media content and optional features may be processed on the basis of your consent.

Platform security, prevention of reservation abuse, user protection, basic analytics and service improvement are our legitimate interests.

If you disagree with processing based on legitimate interest, you have the right to object under Art. 21 GDPR. Contact us at info@zvizz.com.

User account, reservations, subscription and business data are mainly processed on the basis of contract and legal obligation; security logs on legitimate interest; marketing and certain optional content on consent.

Session token, security cookies, authentication and abuse protection are necessary for the platform to operate.

Language, display, account and other technical settings may be stored for up to 2 years.

Collected automatically for security, stability, basic analytics and abuse prevention, and retained for up to 3 months.

Automated decisions are systems that automatically process data to help with security, recommendations, abuse detection or platform operation.

Automated systems may be used for security, prevention of reservation abuse, query processing, structuring host instructions and AI reception operation.

AI reception (Mistral AI) answers guests based on host instructions, property rules and available context. The host is solely responsible for instructions entered into AI reception.

The system may automatically block guests who cancel reservations repeatedly, in line with platform rules. The host can manage blocks manually.

You have the right to request an explanation and human review if you believe automated processing has significantly affected you, under Art. 22 GDPR.

We do not make solely automated decisions that produce legal effects or similarly significantly affect you without the possibility of human intervention.

If you disagree with an automated decision or AI response, contact us at info@zvizz.com for further clarification and review.

You can request confirmation of whether we process your personal data and obtain a copy by emailing info@zvizz.com.

If your data is inaccurate or incomplete, you can request correction.

You can request deletion of your data, except for data we must retain due to legal obligations.

You can request your data in a structured, commonly used and machine-readable format.

If you believe your rights are violated, you have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP).

To exercise your rights, email info@zvizz.com with the subject line ‘GDPR request’ and a clear description of what you seek. We will respond without undue delay and no later than within 30 days.

Content you add or publish remains your property, unless otherwise provided by specific rules or an agreement.

You can remove your media content where that option is available or request removal through support.

Content related to a property may be visible to guests, registered users or publicly, depending on the feature in which it is used.

If you publish content showing people, you are responsible for obtaining the necessary consents and rights for publication.

Publishing pornographic content, violence, discriminatory content, content that infringes copyright or other laws is prohibited.

You are responsible for the content you publish and for having the right to publish it.

Users under 16 may use the platform only with explicit parental or guardian consent.

Minor users may use the platform with clear information about how their data is processed and protected.

We recommend users under 16 use the platform under parental/guardian supervision and support.

Parents/guardians are responsible for supervising how minors use the platform.

We may notify you of changes to the Privacy Policy by email, push notifications or an in-app notice.

Minor changes are published directly on this Privacy Policy page.

For material changes we will notify you by reasonable means before they take effect, where required.

We do not sell your personal data to third parties.

Sharing data with third parties without a valid legal basis, contract or your consent is not permitted.

If you suspect a personal data breach, you can contact us at info@zvizz.com.

For all questions or requests regarding the processing of personal data, contact us at info@zvizz.com.

You can submit complaints about the processing of personal data to info@zvizz.com.

We will respond without undue delay and no later than within 30 days of receiving a proper request.

To protect your data we may, where proportionate and necessary, request additional proof of identity.

If you are not satisfied with our response, you may contact the Croatian Personal Data Protection Agency (AZOP).

Processing of personal data is governed by Regulation (EU) 2016/679 (GDPR) and applicable law of the Republic of Croatia.

We seek to resolve disputes related to data processing directly. This does not affect your right to initiate proceedings before the competent authority or court.

Data on subscription, reservations and transactions is retained in line with statutory periods where necessary for tax and accounting obligations.

Zvizz does not charge commission on reservations. Reservations are free for hosts and guests on the platform.

Guests pay the host directly on arrival. Zvizz does not process, store or intermediate stay payments.

Subscription for AI reception, video feed and marketing tools is charged via Stripe according to the applicable price list.

Stripe is a certified payment service provider (PCI DSS). Card data for subscription is processed through Stripe in line with their privacy rules.

For subscription data, Stripe may act as a separate controller or processor. We recommend reading Stripe’s privacy policy at stripe.com/privacy.

We use necessary security and functional cookies, Stripe security mechanisms and limited basic analytics and technical tools for service stability and security.

The QR guest app lets guests access information, rules, services and AI reception for a specific property. Access is via QR scan or private profile link.

Hosts can connect iCal links from Booking, Airbnb or other channels to sync availability. Zvizz processes occupancy data needed for sync.

AI reception (Mistral AI) uses data entered by the host and available property context to help guests. The host is solely responsible for content and instructions entered.

Email is used for the user account, reservation notices, subscription, support and important security notices.

A phone number may be required for communication, account security, host-guest relations and support.

Zvizz is a Cash Booking platform for hosts and guests — your own profile, free reservations, host confirmation, pay on arrival, calendar sync, guest QR, AI reception and marketing tools.

Reservations are free. Subscription is charged for AI reception, video feed and marketing tools, according to the applicable price list.

For all information, contact us at info@zvizz.com.

TERMINAL ONE d.o.o. za usluge

Split, Republic of Croatia | PIN: 63820061187 | Company reg. no.: 060505215 | Registry: Commercial Court in Split

info@zvizz.com

4.0

10 June 2026

10 June 2026