Privacy Policy

The short version

We collect the least we can: an email address to sign you in, and the names of the people staying, because hotels need them. We never see your card details. We do not sell personal data, we do not share it for advertising, and we do not track you across other websites.

Who is responsible

Rihado, 418 Broadway, Ste N, Albany, NY 12207, United States, is responsible for the personal data described here. Privacy questions go to support@rihado.com.

What we collect, and why

• Your email address, when you sign in. It identifies your account, and it is where sign-in links and booking confirmations are sent. If you sign in with Google, Google also tells us the name on your Google account. We never see a password: there are none.
• Guest names and email addresses, when you book. Hotels require the name of everyone staying. We pass them to the booking provider, and we keep them so your trips page and your confirmations can show who the reservations are for.
• Your reservations: hotels, dates, rooms, amounts, confirmation numbers, cancellation terms, and the payment status and transaction identifiers our booking provider gives us. This is the record of what you bought.
• Searches and page views: the place, dates and party size you searched, and which hotel pages were viewed. These are recorded without a link to your account, so we can see how the service is used, not what you did.
• Technical records. Our hosting providers keep standard server logs, such as the address your connection comes from and the pages requested, for a short time. When something breaks, an error report records the error and the page it happened on, never the full web address or your cookies. If an email to you cannot be delivered, our logs record the address it was meant for.

What we never collect: card numbers, expiry dates or security codes. Payment is taken by LiteAPI as merchant of record, and the card form on our page belongs to its payment processor: what you type in it goes to them directly. We also do not use your device’s location; we search the place you type.

Cookies

Only the ones the site needs to work: cookies that keep you signed in, and two short-lived cookies (an hour) that remember the email you typed on the sign-in page and where to send you back afterwards. No advertising cookies, no analytics cookies, and no cross-site tracking. Because we do not track you, there is nothing for a “Do Not Track” setting to switch off.

Who we share it with

These companies handle data for us, to run the service. None of them may use it for their own purposes.

• LiteAPI, our booking provider and merchant of record: guest names and email addresses, and the reservation details, to make reservations and take payment.
• LiteAPI’s payment processor: the card details you enter into their form, which go to them directly.
• The hotels you book: the guest names, through the booking provider, so they can honour the reservation.
• Our sign-in provider, which sends sign-in emails and verifies your email address or Google account, and Google, if you choose to sign in with it.
• Our hosting, database and email providers, which store the data and send our emails on our behalf, and our error-reporting service, which receives error reports as described above.

Two things your browser does on its own: it loads map tiles from OpenFreeMap and hotel photographs from our booking provider’s image servers, which, like any website you visit, can see your connection address. A directions link opens Google Maps with the two hotels’ locations. Walking and transit times are worked out from the hotels’ locations alone; nothing about you is sent to the services that provide them.

We do not sell personal data, and we do not share it with advertisers. We may disclose it if the law requires us to, to protect someone’s safety, or to enforce our terms. If Rihado is ever sold or merged, your data would pass to the new owner under this policy.

Emails we send

Sign-in links, and emails about your reservations: confirmations, cancellations, and anything that needs your attention. We do not send marketing emails.

How long we keep it

• Reservations, with the guest names on them, for as long as they are needed to support your trip and resolve any dispute, and at least as long as tax and accounting rules require.
• Your account, until you ask us to delete it.
• Searches and page views, which are not linked to you, for as long as they are useful for understanding how the service is used.
• Cached hotel prices, which contain nothing about you, for hours.
• Server logs and error reports, for the short period our providers keep them.

You can ask us to delete your account and personal data at any time. We will keep only what the law requires us to keep, such as the record of a completed transaction.

Your rights and choices

You can ask to see the personal data we hold about you, to correct it, to receive a copy of it, or to have it deleted. Write to support@rihado.com. We will answer within 30 days, or sooner where the law requires, and we will never treat you differently for asking.

If you live in California or another state with its own privacy law, you have these rights under that law too. We do not sell personal data or share it for targeted advertising, so there is nothing to opt out of. If you live outside the United States, note that we are a US company and your data is stored and processed in the United States; you can also complain to the privacy regulator where you live.

Security

Data travels encrypted, our database refuses access to anything but our own systems, and access inside the company is limited to the people who need it to run the service. Because we never receive card details, the most sensitive data in a hotel booking is never ours to lose. No system is perfectly secure; if you believe your account has been misused, write to us at once.

Children

Rihado is for adults. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy we will update the date at the top. Where a change matters to you, we will email you before it takes effect.

Contact

Rihado, 418 Broadway, Ste N, Albany, NY 12207, United States. Privacy questions: support@rihado.com.

Homes by Avery LLC dba Rihado, a New York limited liability company, is responsible under this policy.