Privacy policy

Who is responsible for your data?

The website siestoo.com and the data collected on it are managed by Siestoo, which rents out furnished apartments in Paris. For any question about your data: siestoo.contact@gmail.com.

What data is collected?

• Your account: email address, first name, last name, password (stored in encrypted form, never readable, including by us). If you log in with Google, we receive from Google your name, your email address and your profile photo, and nothing else.
• Your contact details and situation: phone number and reason for your stay (studies, work assignment…), needed to draw up your lease.
• Your bookings: apartment, dates, length of stay, amount, any message and the follow-up of your request.
• Payment, when prepayment is offered: it is handled entirely by Stripe. We never see or store your card number.

What is it used for?

• Creating and securing your client account, and letting you follow your requests.
• Processing your booking: checking availability, assessing your eligibility for the lease, preparing the contract and contacting you about it.
• Sending you emails related to your account (email address confirmation, forgotten password).

This processing is based on the performance of the rental contract or of steps taken at your request before entering into it. We send no advertising and we never sell or rent out your data.

Who has access to it?

Only Siestoo consults your data. To run the website, it is hosted or transmitted by technical service providers, who act only on our instructions:

• Supabase: client accounts and bookings, servers located in Paris (European Union).
• Resend: sending account emails, servers located in Ireland (European Union).
• Netlify: website hosting and receipt of booking requests.
• Stripe: secure payment, where applicable.
• Google: only if you choose “Continue with Google”, and for displaying the website’s fonts.

Some of these providers are based outside the European Union (in particular in the United States); such transfers are then covered by the safeguards provided for by the GDPR (standard contractual clauses or the EU–US Data Privacy Framework).

How long is it kept?

• Your account is kept for as long as you use it, then deleted after 3 years of inactivity.
• Booking data is kept for the duration of our relationship, then for 3 years; accounting and contractual documents are kept for the period required by law (up to 10 years).

Cookies

The website uses no advertising or audience measurement cookies. Only one piece of technical information is stored in your browser to keep you logged in to your account; it is removed when you log out.

Your rights

You may at any time access your data, correct it, request its deletion or portability, object to its processing or request that processing be restricted. You can edit your contact details directly in your account; for anything else, write to siestoo.contact@gmail.com; we reply within one month.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): cnil.fr.

Last updated: 27 September 2026.