Privacy Policy

    Version 1 · Effective June 19, 2026

    This Privacy Policy explains how My Santa Teresa Home ("we", "us", or "our") collects, uses, shares, and protects personal information, and the rights you have. It covers our website and services (the "Platform"). For cookies and similar technologies, see our Cookie Policy.

    1. Who we are (data controller)

    My Santa Teresa Home is the controller of your personal information. Contact: hello@mysantateresahome.com, 50 m north of Plaza Kahuna, Santa Teresa, Puntarenas 60111, Costa Rica.

    2. Information we collect

    • Account information — name, email address, password (stored hashed by our authentication provider), and, if you sign in with Google, basic Google profile data.
    • Profile information — profile photo, biography, languages, stay dates, budget, lifestyle and rental preferences, and similar details you choose to provide.
    • Listing information — property descriptions, prices, availability, amenities, photos, and approximate or precise property location.
    • Communications — contact requests, messages, inquiries, support requests, and the contact details exchanged when a request is accepted.
    • Pre-sign-up inquiries — information you enter into lead or inquiry forms before creating an account.
    • Usage, device & analytics data — pages viewed, interactions, approximate location derived from IP address, browser/device data, and session-replay data collected through analytics tools (see the Cookie Policy).
    • Consent records — a log of the consents you give (to these policies and to marketing or photo use), including timestamp, version, and technical metadata, kept to demonstrate compliance.

    3. How and why we use your information (legal bases)

    • To provide the Platform — create and manage your account, publish listings, match Renters and Owners, and enable contact requests. Legal basis: performance of a contract.
    • To communicate with you — service messages, transactional notices, and responses to your requests. Legal basis: contract / legitimate interests.
    • Marketing — newsletters and updates by email, and, where offered, SMS or WhatsApp messages. Legal basis: your consent, and/or legitimate interests with the ability to opt out.
    • Analytics & improvement — understand usage and improve the Platform. Legal basis: consent where required, otherwise legitimate interests.
    • Security, fraud prevention & legal compliance — protect users and meet legal obligations. Legal basis: legitimate interests / legal obligation.

    4. Public display of your information

    Some information is shown publicly by design. Owner profile details (such as your name, profile photo, and biography) and your listing content — including property photos and location — are visible to visitors on public listing pages. Where you have given photo & social-media consent, property photos and listing content may also be used in our marketing and on social media. Please do not include information in public fields that you do not want to be public. Renter profile details are shown to an Owner only in the context of a contact request.

    5. Marketing communications

    You can opt in to marketing by email, SMS, or WhatsApp when you create an account or in your settings, and you can opt out at any time using the unsubscribe link in an email, by replying STOP where applicable, or by contacting us. Transactional and service messages necessary to operate your account are not marketing and may still be sent.

    6. Cookies, analytics & session replay

    We use cookies and similar technologies, including Google Analytics and LogRocket session replay, to operate and improve the Platform. You can accept or decline non-essential analytics through our cookie banner and the "Cookie preferences" and "Do Not Sell or Share My Personal Information" links in the footer. See the Cookie Policy for details.

    7. How we share information — service providers

    We do not sell your personal information for money. We share it with service providers (processors) that help us run the Platform, under contracts that limit their use of the data:

    • Supabase — database, authentication, file storage, and serverless functions (hosting infrastructure).
    • Email delivery provider — sending transactional and marketing email.
    • Google LLC — Google Analytics (usage analytics), Google OAuth (optional sign-in), and Google Fonts (font delivery).
    • LogRocket — product analytics and session replay.
    • Content delivery / image processing — serving and transforming images.

    We may also disclose information to comply with law, enforce our Terms, or protect rights, safety, and security, and in connection with a corporate transaction.

    8. International data transfers

    Our service providers may process data in the United States and other countries whose laws may differ from yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

    9. Data retention

    We keep personal information for as long as your account is active and as needed to provide the Platform, then for a reasonable period to meet legal, accounting, security, and dispute-resolution needs, after which we delete or anonymize it. Pre-sign-up inquiries are retained only as long as needed to respond and for a limited follow-up period. Consent records are kept for as long as needed to demonstrate compliance.

    10. Your rights (GDPR / EEA & UK)

    Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to processing of your personal information; the right to data portability; and the right to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local data-protection authority.

    11. Your rights (California — CCPA/CPRA)

    California residents have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of any "sale" or "sharing" of personal information (including certain analytics/advertising activity); and to be free from discrimination for exercising these rights. We disclose the categories above (identifiers, internet/usage activity, geolocation, audio/visual data such as photos, and inferences) to the service providers listed in Section 7 for the purposes described. To opt out, use the "Do Not Sell or Share My Personal Information" link in the footer or submit a privacy request. Authorized agents may submit requests with proof of authorization.

    12. How to exercise your rights

    Submit a request through our privacy request form or email hello@mysantateresahome.com. We will verify your identity and respond within the timeframe required by applicable law.

    13. Children's privacy

    The Platform is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

    14. Security

    We use technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

    15. Changes to this Policy

    We may update this Policy from time to time. The version number and effective date on this page indicate the current version. Material changes take effect when posted.

    16. Contact

    hello@mysantateresahome.com — My Santa Teresa Home, 50 m north of Plaza Kahuna, Santa Teresa, Puntarenas 60111, Costa Rica.

    We use cookies and similar tools — including analytics (Google Analytics and LogRocket) — to run this site and improve it. You can accept or decline non-essential analytics. See our Cookie Policy.