1. Data controller
Aro is responsible for the processing of the personal data collected through the platform, both from the businesses that use it (the "Operators") and from the end customers who make bookings.
For any matter related to this notice you can write to us at [email protected].
2. Data we collect
From Operators: name, email address, business information (trade name, logo, services, prices, and availability), and the billing details needed to manage the subscription.
From end customers: name, email address and, where applicable, phone number, together with the details of the booking made. Payments are processed by external providers; Aro does not store card numbers.
We also collect technical usage data (IP address, browser type, and pages visited) to operate and improve the service.
3. Purposes of processing
We use the data to: create and manage accounts, handle bookings and payments, send transactional communications (confirmations, reminders, and service notices), provide support, bill subscriptions, and comply with legal obligations.
We do not sell or share personal data with third parties for advertising purposes.
4. Processors and transfers
We share data only with providers that help us operate the platform — payment processing, email delivery, messaging, and file hosting — under agreements that require them to protect the information and use it solely to deliver the contracted service.
Some of these providers may be located outside your country; in those cases the transfer is carried out with the safeguards required by applicable law.
5. End-customer data
With respect to the data of customers who book with an Operator, Aro acts as a data processor: the Operator decides how that data is used. Operators undertake to use it solely to manage bookings and related communications.
6. Retention and security
We keep the data while the account is active and for the periods required by law. We apply reasonable technical and organizational measures — encryption in transit, access controls, and per-operator isolation — to protect the information.
7. Your rights
You can exercise your rights of access, rectification, erasure, and objection, as well as withdraw your consent, by writing to [email protected] from the email address associated with your account. We will respond within the timeframes set by applicable law.
8. Changes to this notice
We may update this notice to reflect changes in the service or in legislation. We will publish the current version on this page indicating the date of the last update.