Privacy Policy

Controller: Viserato DOO, Sveta Vraca, 85331 Kotor, Montenegro. Privacy contact: info@viserato.com. Support: support@viserato.com.

• Account and identity data (name, email, phone, role as Guest/Host, authentication data via our auth provider).
• Booking and payment-related data (trip details, amounts, payment status; card data is handled by payment partners such as AllSecure).
• Host/business data (business name, payout details, listings, calendars, earnings).
• Communications (inbox messages, support emails, reviews).
• Technical data (IP address, device/browser info, logs, locale preference).
• Optional marketing preferences if you opt in.

• Provide the Platform, accounts, bookings and payouts (contract / steps prior to contract).
• Fraud prevention, security and abuse detection (legitimate interests / legal obligation).
• Customer support and dispute handling (contract / legitimate interests).
• Improve and measure Platform performance with limited analytics (consent where required, otherwise legitimate interests).
• Comply with law, respond to lawful requests, and keep records (legal obligation / legitimate interests).
• Marketing communications only where allowed (consent or soft opt-in where applicable).

We share data with: the other party to a booking (Guest ↔ Host) as needed to fulfil the booking; payment processors; authentication providers (e.g. Clerk); hosting/infrastructure vendors; professional advisers; and authorities when legally required. We do not sell your personal data.

Some providers may process data outside Montenegro or the EEA. Where required, we use appropriate safeguards (such as contractual clauses) with those providers.

We keep data only as long as needed for the purposes above, including booking history, legal claims periods, tax/accounting rules and security logs. You may request deletion subject to legal retention duties.

Depending on applicable law, you may have rights to access, rectify, erase, restrict or object to certain processing, and to data portability. You may withdraw consent where processing is consent-based. Contact ${COMPANY.infoEmail}. You may also lodge a complaint with a competent supervisory authority.

The Platform is not directed at children under 18. We do not knowingly collect personal data from children for account registration.

See our Cookie Policy for details on cookies and similar technologies.

We may update this Policy. The “Last updated” date will change when we do. Significant changes may be highlighted on the Platform.