Data Processing Overview
Last updated: January 2026
This page provides a technical overview of how HotelRebook processes your data. We believe in transparency about our data handling practices.
Data Flow
Here's how your data flows through our system:
1. Email Forwarding
You forward your hotel confirmation email to our dedicated address. The email is received by our email processing service.
2. Parsing
Our system extracts booking details: hotel name, location, dates, room type, guest count, and price. We do not store the original email content.
3. Property Matching
We match your hotel to listings on Google Hotels to enable price monitoring.
4. Price Monitoring
Our system checks current prices multiple times daily until your cancellation deadline.
5. Alert Generation
When we detect a price drop meeting your threshold, we generate an alert and send you an email notification.
Data Storage
Your data is stored securely:
- Database: PostgreSQL hosted on Supabase in EU (Frankfurt) region
- Encryption at rest: AES-256 encryption for all stored data
- Encryption in transit: TLS 1.3 for all data transmission
- Backups: Daily automated backups with 7-day retention
Encryption Details
We use industry-standard encryption:
- TLS 1.3: All connections to our service are encrypted
- AES-256: Database encryption at rest provided by Supabase
- No password storage: We use OAuth and magic links, never storing passwords
Subprocessors
We use the following third-party services to process your data:
| Service | Purpose | Data Location |
|---|---|---|
| Supabase | Database, Authentication | EU (Frankfurt) |
| Vercel | Hosting, Serverless Functions | Global Edge Network |
| Resend | Email Delivery | US |
| Google Hotels | Price Data Source | US |
Data Retention Policy
How long we keep different types of data:
- Active reservations: Until checkout date + monitoring period
- Historical reservations: Until you delete your account
- Price history: 90 days after checkout
- System logs: 30 days
- Deleted accounts: Permanently removed within 30 days
Data Access
Who can access your data:
- You: Full access via your dashboard
- Administrators: Limited access for support and troubleshooting
- Automated systems: Price monitoring and alert generation
- No third-party sale: We never sell your data to third parties