Privacy Policy
Last updated: January 2026
This Privacy Policy explains how Suprangon collects, uses, and protects information for property staff, owners, and the guests whose data staff enter on their behalf. Suprangon is a business-to-business tool used by property staff and has no public-facing guest accounts or guest logins.
Information we collect
We collect account information for property staff and owners (name, email, phone, role), organization/property information, and operational data entered by staff, including guest name, phone, identity document number, and address for booking and check-in purposes.
How we use information
Information is used to provide the booking, check-in/out, meal planning, housekeeping, payment, and reporting features of the service, to secure staff accounts, and to communicate service-related updates.
Guest data handling
Guest core details (name, phone, identity document number, address) are entered by property staff and cannot be edited or deleted through the product after creation, to preserve booking history integrity. Properties are the data controller for their own guests' information, and Suprangon acts as a data processor on their behalf.
Data security
Passwords are hashed with bcrypt at 12 rounds. All traffic is encrypted in transit. Access to tenant data is enforced at the API layer by organization, and cross-tenant access attempts are blocked and logged.
Data retention
Operational records (bookings, payments, expenses) are retained even if a subscription lapses or is suspended. Staff and other soft-deletable records are deactivated, never hard-deleted, to preserve historical accuracy of past bookings and reports.
Contact
Questions about this policy can be sent to hello@suprangon.com.