Data Processing Overview

Last updated: January 2026

This page provides a technical overview of how HotelRebook processes your data. We believe in transparency about our data handling practices.

Data Flow

Here's how your data flows through our system:

1. Email Forwarding

You forward your hotel confirmation email to our dedicated address. The email is received by our email processing service.

2. Parsing

Our system extracts booking details: hotel name, location, dates, room type, guest count, and price. We do not store the original email content.

3. Property Matching

We match your hotel to listings on major travel platforms to enable price monitoring.

4. Price Monitoring

Our system checks current prices multiple times daily until your cancellation deadline.

5. Alert Generation

When we detect a price drop meeting your threshold, we generate an alert and send you an email notification.

Data Storage

Your data is stored securely:

  • Database: Hosted on secure EU-based infrastructure
  • Encryption at rest: Industry-standard encryption for all stored data
  • Encryption in transit: Modern encryption protocols for all data transmission
  • Backups: Regular automated backups with appropriate retention

Encryption Details

We use industry-standard encryption:

  • All connections to our service are encrypted using modern protocols
  • Database encryption at rest using industry-standard methods
  • Passwordless authentication: We use secure sign-in methods, never storing passwords

Third-Party Services (Subprocessors)

We use the following trusted services to operate HotelRebook:

ServicePurposeLocation
SupabaseDatabase hosting and authenticationEU (Frankfurt)
VercelWebsite hosting and serverless functionsGlobal CDN
ResendTransactional email deliveryUSA
Google HotelsPrice comparison data sourceGlobal

Data Retention Policy

How long we keep different types of data:

  • Active reservations: Until checkout date + monitoring period
  • Historical reservations: Until you delete your account
  • Price history: Retained for a limited period after checkout
  • System logs: Retained briefly for troubleshooting
  • Deleted accounts: Permanently removed promptly

Data Access

Who can access your data:

  • You: Full access via your dashboard
  • Administrators: Limited access for support and troubleshooting
  • Automated systems: Price monitoring and alert generation
  • No third-party sale: We never sell your data to third parties