Legal

Tool

Purpose

Privacy Policy

Adyen N.V. (NL)

Apaleo uses Adyen's payment services to process payments on behalf of our customers from customers' guests. For this purpose, we give data regarding the means of payment (credit cards or information about other payment methods such as PayPal, Klarna or other providers) to Adyen N.V. Further. Apaleo ensures that the necessary data protection standards, such as PCI-DSS, are complied with and for this purpose Apaleo is subject to an annual external audit. Customer Success employees have access to the end users and customers personal data. The access is secured by a personal login.

https://www.adyen.com/policies-and-disclaimer/privacy-policy

Amazon Web Services EMEA SARL (DE)

app.Apaleo.com uses Amazon Web Services (AWS) as infrastructure. Thereby, personal data is stored and processed on AWS servers.

Apaleo uses large language models (including Anthropic Claude models) hosted by AWS (Amazon Bedrock) in all current and upcoming AI features. These are hosted in the EU and will be processing unredacted personal data of guests and staff of the Customer. AWS is Apaleo’s contractual counterparty for these models; the model providers do not receive access to prompts or outputs. Inference is restricted to EU regions .

https://aws.amazon.com/privacy/

Anthropic, PBC (US) – AI Subcontractor

Apaleo uses Anthropic’s Claude applications (Claude Enterprise) as an internal tool for Apaleo personnel, which may come into contact with business contact data and, where necessary for support, Customer Data. Apaleo uses the Anthropic API for the Fluid Dashboards feature, which receives only the user’s free-text prompt, property identifier, user role(s), locale, current date and Apaleo’s API documentation – no guest, reservation, folio, invoice or payment data (personal data typed into a prompt is also transmitted). Customer Data is processed only to the extent necessary for the relevant function, under business terms that exclude use of Customer Data for model traininig. Processing for Fluid Dashboards takes place within the EEA . All other AI features use Claude models hosted by AWS (Amazon Bedrock) in the EU – see the Amazon Web Services entry.

https://www.anthropic.com/legal/privacy https://www.anthropic.com/legal/data-processing-addendum https://www.anthropic.com/subprocessors

Chargebee Inc. (US)

Apaleo uses Chargebee for subscription billing, invoicing and payment collection from Apaleo’s customers (account holders). Chargebee processes business contact, billing address, tax and payment-method data of the Customer and its authorised contacts; no guest data is processed. Listed for transparency: Apaleo acts as controller for this data.

https://www.chargebee.com/privacy/ https://www.chargebee.com/privacy/dpa/

Cloudflare, Inc. (US)

Apaleo uses Cloudflare for DNS, content delivery, web application firewall and DDoS protection of Apaleo web properties and APIs. Requests to proxied Apaleo services pass through Cloudflare’s network, so request data, including IP addresses and technical identifiers, and request content in transit are processed.

https://www.cloudflare.com/privacypolicy/ https://www.cloudflare.com/cloudflare-customer-dpa/

Contentful GmbH (DE)

Apaleo to use Contentful GmbH for the certification process for software solutions, storing data and information on the status of the relationships with the app solution.

https://www.contentful.com/legal/privacy-at-contentful/privacy-notice/

Datadog, Inc. (US)

Apaleo uses software from Datadog, Inc. to analyze the performance of app.Apaleo.com. For this purpose, personal data is processed to Datadog, Inc.

https://www.datadoghq.com/legal/privacy/ https://www.datadoghq.com/legal/datadog-eea-data-processing-addendum/

Datatrans AG (CH)

Apaleo uses Datatrans’ payment gateway and PCI proxy services to securely capture, tokenise and forward payment card and payment method data in PCI-DSS-compliant environments when payments are processed on behalf of our customers from customers’ guests.

https://www.weareplanet.com/legal

EFSTA – efsta IT Services GmbH (AT)

Apaleo uses the EFSTA fiscalisation service to create fiscal signatures and fiscal data records for receipts and invoices in countries that require certified fiscalisation. Fiscal data and receipt data are encrypted by the EFSTA system and stored in an EU data centre.

https://www.efsta.eu

Fonoa Technologies Limited (IE)

Apaleo uses Fonoa for tax determination, e-invoicing and tax-compliance services in connection with country-specific invoicing requirements. Fonoa processes invoice and transaction data, which may include names, addresses and tax identifiers of guests, bookers and Customers.

https://www.fonoa.com/legal/privacy-notice

GitHub, Inc. (Microsoft) (US)

Apaleo uses GitHub for source-code hosting, version control and build/deployment workflows of the Apaleo product development. No Customer Data is intended to be stored there; processing is limited to account data of Apaleo developers and any personal data incidentally contained in code, issues or logs.

https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement https://github.com/customer-terms/github-data-protection-agreement

HubSpot Ireland Limited (IE) / HubSpot, Inc. (US)

Apaleo uses HubSpot as CRM, marketing and customer-success tool to manage contact data of customers, their employees and users, website visitors, leads and app providers (see Appendix 2). Customer Data from the operation of the Service is not intended to be stored in HubSpot.

https://legal.hubspot.com/privacy-policy https://legal.hubspot.com/dpa

Invopop S.L. (ES)

Apaleo uses Invopop to generate, sign and transmit electronic invoices and fiscal records to the competent tax authorities in supported countries where the relevant country module is enabled. Invoice data processed may include names, addresses and tax identifiers of guests, bookers and Customers.

https://www.invopop.com

Linear Orbit, Inc. (US)

Apaleo product development uses Linear as an internal tool for issue tracking, planning and delivery management. Customer Data is not intended to be stored there; personal data may be contained incidentally in tickets (e.g. identifiers referenced in support escalations).

https://linear.app/privacy https://linear.app/dpa

OpenAI Ireland Ltd. (IE) / OpenAI OpCo, LLC (US) – AI Subcontractor

Apaleo uses OpenAI services (API and enterprise offerings) for AI-enabled functionality and internal tooling. Customer Data is processed only to the extent necessary for the relevant function, under business terms that exclude use of Customer Data for model training.

https://openai.com/policies/privacy-policy/ https://openai.com/policies/data-processing-addendum/ https://platform.openai.com/subprocessors

Payrails GmbH (DE)

Apaleo uses Payrails’ PCI proxy services to securely capture, tokenise and forward payment card and payment method data in PCI-DSS-compliant environments when payments are processed on behalf of our customers from customers’ guests.

payrails.com

PostHog, Inc. (US) – EU-region hosting

Apaleo uses PostHog for product analytics, to log prompt text and non-personal usage data (timing, outcome, feature interactions) of the Fluid Dashboards feature in order to understand and improve it. Guest, reservation, folio, invoice and payment data are by design not sent; because prompts are logged verbatim, personal data typed into a prompt is also stored by PostHog. Apaleo uses PostHog’s EU-region servers (EEA).

https://posthog.com/privacy https://posthog.com/dpa

Productboard Inc. (US)

Apaleo uses Productboard for improving the product and new features by obtaining certain customer insights, and managing roadmaps.

https://www.productboard.com/privacy-policy/

Usetiful - Dobbytec OÜ (EST)

Apaleo uses Usetiful as a layer over Apaleo product, and it helps the customer to navigate through the product.

https://www.usetiful.com/privacy-policy https://www.usetiful.com/gdpr

Zendesk, Inc. (US)

Apaleo uses Zendesk Support and Zendesk Guide to provide users with support and documentation. Personal data is stored and processed to Zendesk. Inc.

https://www.zendesk.com/company/privacy-and-data-protection/