Privacy Policy

Last Updated: April 2026

Operator: THAULOW d.o.o., OIB 74670878374

1. What We Collect

We collect information you provide when creating an account (name, email, phone), listing a space (address, photos), or making a booking (payment details via Stripe). We also collect device information and usage data to improve the service.

2. How We Use It

Your data is used to: operate the marketplace (connect renters with hosts), process payments via Stripe, send booking confirmations and notifications, verify identity (Stripe Identity), comply with EU tax reporting (DAC7), and improve the platform.

3. Data Sharing

We share data with: Stripe (payments, identity verification), Twilio (SMS verification), Resend (email delivery), Google Cloud (hosting, storage), PostHog (analytics, EU servers). We never sell your personal data.

4. Your Rights (GDPR)

Under GDPR, you have the right to: access your data, correct inaccurate data, delete your account (right to be forgotten), export your data (data portability), restrict processing, and object to processing. Contact us at privacy@storabear.com to exercise these rights.

5. Data Retention

Account data is retained while your account is active. Financial records are kept for 7 years (EU tax compliance). After account deletion, personal data is anonymized within 30 days, but financial records are retained in anonymized form.

6. Security

We use HTTPS encryption, httpOnly secure cookies, JWT authentication, and store data on Google Cloud Platform infrastructure. Payment data is handled entirely by Stripe - we never store card numbers.

7. Cookies

We use essential cookies (authentication session) and analytics cookies (PostHog, EU-hosted). You can manage cookie preferences through your browser settings.

8. Contact

Data Controller: THAULOW d.o.o.
Email: privacy@storabear.com
Address: Misevac 14, 21220 Trogir, Croatia

9. Changes

We may update this policy. Significant changes will be communicated via email or in-app notification.