Privacy Policy

Air Cube Limited is a company registered in England and Wales under company number 15080319, with registered office at PO Box 4385, Cardiff, CF14 8LH (“we”, “us”, “our”). We operate the website aircube.com and manage luxury short-term rental properties in Paris.

We are the data controller for the personal information we collect about you. For any privacy-related enquiries, please contact us at privacy@aircube.com.

We collect the following categories of personal data:

• Identity data: title, first name, last name, date of birth, nationality.
• Contact data: email address, phone number.
• Booking data: check-in/check-out dates, number of guests, property selected, add-ons chosen.
• Payment data: processed securely by Stripe Inc. We do not store your full card number, expiry date or CVV on our servers. If you opt in to save your card for future bookings, a tokenised reference is stored by Stripe under PCI DSS Level 1 compliance.
• Technical data: IP address, browser type, device information, pages visited, collected via cookies and analytics tools.
• Communication data: any messages you send us via our contact form, email, or in-app chat. Chat messages exchanged through our booking pages are stored via the Guesty conversation system.
• Referral data: if you participate in our referral program, we store your referral link usage and the associated discount applied.

We use your personal data for the following purposes:

• To process and manage your booking, including creating reservations in our property management system (Guesty).
• To process payments securely via Stripe.
• To send you booking confirmations and pre-arrival information.
• To respond to your enquiries and provide customer support.
• To comply with legal obligations (e.g., tax reporting, local regulations).
• To improve our website and services through analytics.
• To provide multi-language support by translating content via DeepL (text is sent to DeepL servers for translation and cached).
• To manage the referral program and apply associated discounts.

We process your personal data on the following legal bases:

• Contract: processing necessary to fulfil our rental agreement with you.
• Legitimate interests: improving our services, fraud prevention, marketing to existing customers.
• Legal obligation: compliance with applicable laws and regulations.
• Consent: where you have opted in to receive marketing communications.

We share your personal data with the following third parties, solely to deliver our services:

• Stripe Inc. — payment processing.
• Guesty Inc. — property management, reservation handling, check-in form processing and guest chat conversations.
• Resend Inc. — transactional email delivery.
• Vercel Inc. — website hosting.
• Upstash Inc. — data caching and storage infrastructure (Redis).
• DeepL SE — automated translation of listing descriptions and UI content. Text is sent to DeepL servers; no personal data is included in translation requests.

We do not sell your personal data to any third party. We may disclose your data if required by law or to protect our legal rights.

Some of our service providers are based outside the UK and EEA. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and/or UK International Data Transfer Agreements.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Booking data is retained for 6 years after your stay for accounting and legal compliance purposes. You may request earlier deletion where no legal obligation requires us to retain it.

Under applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to processing of your data.
• Request portability of your data in a structured format.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at privacy@aircube.com. We will respond within 30 days.

Our website uses the following cookies:

• Session cookie: a strictly necessary cookie to maintain your session (e.g., locale preference, authentication state). This cookie is essential for the website to function and cannot be disabled.
• No tracking cookies: we do not currently use any third-party tracking or advertising cookies.

We may introduce analytics cookies in the future, in which case we will update this policy and request your consent where required by law. You can manage cookie preferences through your browser settings at any time.

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS/TLS), secure payment processing via Stripe, and access controls for our internal systems.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this page periodically.

For any questions about this Privacy Policy or our data practices, please contact:

Air Cube Limited
Company number: 15080319
Email: privacy@aircube.com