Privacy
Data controller
CLOUDCORE, single-shareholder simplified joint-stock company, 2 B chemin du Vivier, 78310 Maurepas, France — SIREN 820 738 714, Versailles Trade Registry. Contact: [email protected]. Full details on the legal notice page.
Data we collect
- Account: e-mail and password (hashed, never stored in clear text), preferred language/currency/country.
- Your portfolio data: listings, rates, calendars, cleaning, and any internal notes you enter.
- Bookings and guests: received from the booking platforms you connect, via our Channex connector — stay dates and, depending on the platform, guest contact details — only to the extent needed to run your business.
- Platform credentials: most platforms are linked through an authorisation page opened on their own site. When a platform does not offer this (VRBO), your credentials are passed on to Channex, the channel manager that connects on your behalf, while the verification code is received. Nestiz deletes them as soon as the connection is made, and at the latest the next day.
- Payment: handled directly by Stripe; Nestiz does not store any card data. Guest payments (booking site, bookings from platforms that allow it) are collected on the host's own Stripe account, via Channex.
- Contact: if you write to us via the contact form, the waitlist or the site chat: your name, e-mail and message and, if you provide them, your phone number and number of listings, plus how you arrived on the site. They are only used to reply to you and are deleted at the latest three years after our last exchange.
Subprocessors
Some processing is entrusted to providers, on our behalf and for that sole purpose:
- Stripe (subscription payment);
- Channex, a UK company (connection to booking platforms; data hosted in Europe and the United States);
- Brevo, an e-mail delivery provider based in France (transactional e-mails: confirmation, password reset);
- Anthropic (Claude), a US company: analysis of inspection photos (items, their condition and damage), turning your pricing instructions into rules, finding events near your listings and live help;
- Google (Gemini), a US company: analysis of inspection photos, alongside Claude;
The application itself is hosted by CLOUDCORE on its own servers located in France: no third-party hosting provider is involved.
Where a provider is based in the United States, the transfer is covered by the European Commission's standard contractual clauses or an equivalent mechanism.
Live help. When you write in the help bubble, an AI assistant answers. To guide you, it receives your messages, the page of the app you are writing from and the account details relevant to the question: names of your listings, connected platforms, dates of upcoming stays, sync errors, subscription status. No name, e-mail or phone number of your guests, and no password. A person from the Nestiz team can take over at any time, at your request or the assistant's.
Following your screen. During a help request, the Nestiz team may offer to follow your screen. Nothing is sent without your consent: you accept or decline in the app, a banner stays on screen while it lasts, and “Stop” ends it at once. It also ends by itself after one hour or if you stay inactive. The team then sees the Nestiz page you are on, where you scroll, where you click and which field you are typing in, but never what you type; windows of other sites (Channex, for example) are not visible to them. It is neither a video nor a recording: only the latest position is kept while it lasts, and it is erased as soon as it ends.
Transfer of the business
If the operation of Nestiz is taken over by another company, account data is passed on to it so the service continues unchanged. You are informed by e-mail at least thirty days in advance, and may cancel and request deletion of your data before the transfer date.
Retention
Your data is kept for the duration of your subscription, then for as long as required by our accounting and legal obligations, before deletion or anonymisation.
Your rights
Under the General Data Protection Regulation, you have a right of access, rectification, erasure, objection, restriction and portability over your data. These rights can be exercised at [email protected]. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
To delete your account and its data: delete your account.