Draft — pending attorney review
This document has not yet been reviewed by a lawyer. We publish it so it can be read and corrected. If anything here conflicts with what you were shown at the moment you booked or paid, what you were shown then is what stands.
Version 2026-08-06
Privacy policy
What we hold about you, why, who else sees it, and what we deliberately do not collect. Written from the software rather than from a template — every section says where the rule lives in the code. Last updated 6 August 2026.
Who holds this data
Rent La Ventana is a marketplace for La Ventana and El Sargento, Baja California Sur. We introduce people who have something to let — a house, a lesson, a kite, a truck, a ride from the airport — to people who want it.
On direct listings we are not the seller, and that shapes this whole document. The agreement is between you and the owner, your card is charged on THEIR payment account rather than ours, and some of what follows is about what we pass to them rather than what we keep.
Questions, corrections or a request to delete your account: diana@rentlaventana.com.
What we hold
An account is an email address and a password. The password is hashed by our authentication provider and is not readable by us or by anyone at Rent La Ventana.
A profile adds your name, and optionally a WhatsApp number, a country and a photo. The number is optional and is used for two things only: reaching you about your own bookings, and being handed to the other party once a booking is confirmed.
If you list something, we hold what you wrote about it — the description, prices, photos, availability, your own cancellation terms — because that is the listing.
If you book something, we hold the dates, the party size, the amounts, and the messages between you and the other party.
Enforced in supabase/migrations/0001_profiles.sql · 0002_marketplace_schema.sql
What we deliberately do not collect
We never see or store your card number. Payment happens on a page hosted by Stripe, and the charge is created on the owner's own account.
We do not ask your nationality, and nothing on this site is decided from it. Our service fee applies to guests located outside Mexico, and that judgement is made from payment and network signals at the moment of booking — the country of the card, and the country your connection appears to come from. It is a location question, not a question about who you are. The field that records it starts as ‘unknown’ on purpose and is never filled in from anything you type about yourself at signup.
We do not track you around the internet, and there is no advertising network on this site.
Enforced in migrations/0002 · lib/fees.ts
What is public, and what never is
A public profile shows your name, your photo, whether you are a verified owner, and any business name and description you added. That is the whole of it.
Your email address, your WhatsApp number and your country are never public. They sit behind a database view that exposes a fixed handful of safe columns, so a page cannot show them by accident even if somebody writes the code that tries.
A listing shows an approximate location rather than an exact one until a booking is confirmed. A shop shows only the town.
Enforced in public_profiles view · migrations/0002
What the other party gets, and when
Your name and WhatsApp number are released to the other party when a booking is CONFIRMED, and not before. Before that the two of you can message through the site, and contact details typed into those messages are filtered out.
That filter is not there to keep you apart. It is there because a booking taken off the platform has no payment record, no refund route and no recourse for either side. Once money has moved, you are counterparties with a lesson to attend or a house to enter, and the filtering becomes an obstacle rather than a protection — so it stops.
Owners see what they need to host: your name, your dates, your party size, and your number once confirmed. Owners never see your card details, and they do not see the fee you paid us.
Enforced in public.counterpart_contact() · migrations/0008
Who else your data reaches
Stripe processes payments and holds the card details we never see. On a direct listing the owner is the merchant of record and Stripe is their processor as much as ours.
Supabase hosts the database and the login system. Cloudflare serves the site. Resend sends the transactional email — your booking confirmations and receipts.
Mapbox turns a typed address into a map pin. Open-Meteo supplies the wind forecast. Neither receives anything about you.
That is the list. We do not sell data, and we do not share it with anyone not named here.
If you connect a calendar
Owners can connect a Google Calendar so that confirmed bookings appear in it automatically. If you do, we store a credential that lets us add and remove events on the calendars you chose. It is kept in a table that no browser and no logged-in user can read — only our server, and only to write your own bookings.
Events we create carry the listing name and nothing else. No guest name, no amount. A calendar is a thing people share with a partner and mirror to a phone, and a guest’s name should not arrive somewhere they did not choose to send it.
Disconnecting stops it immediately. Events already written stay in your calendar, because they are yours; delete any you do not want. You can also revoke us from your Google account directly.
The calendar feed we publish for a listing contains only the times that are taken and the word ‘Reserved’. It never contains a guest’s name, and it never contains an amount — that link is a long secret in a URL, and it is written so that leaking it discloses nothing but which hours are busy.
Enforced in lib/google-calendar.ts · lib/ical.ts · migrations/0066
How long we keep it
Bookings, payments and the messages attached to them are kept while the account exists and afterwards where we are required to — a completed transaction is a tax and accounting record for both sides, not only for us.
You can delete your account by writing to us. Listings and profile data go with it. A booking that another person is also a party to is not erased from their side, because it is their record as much as yours.
Your rights
You can ask what we hold about you, ask for it corrected, ask for a copy, or ask for it deleted, at diana@rentlaventana.com. We are a small operation in a small town and the honest route is to write and ask; there is no ticketing system standing between you and an answer.
You can change your name, number and country yourself at any time from your account.
⚑ Lawyer review
Jurisdiction is unresolved. THE PLATFORM ENTITY IS IN THE US (California) — an earlier version of this note said the company was Mexican, which is wrong and would have produced advice built on a false premise. The properties and services are in Mexico, the owners are largely Mexican taxpayers, and most guests are neither Californian nor Mexican. Whether Mexico’s LFPDPPP, the GDPR, US state privacy law or some combination applies — and what each requires here that this text does not yet say — needs an actual opinion. See the governing-law note on the Terms, which has the entity's location right.
Children
This site is not for under-18s, and we do not knowingly hold data about them. Someone under 18 taking a lesson is booked for by an adult, and it is that adult’s account and details we hold.
Changes
When this changes materially we will say so on the site rather than quietly editing the page. The date at the top is the version in force.
Something here not making sense, or not matching what happened to you? Tell us. While this is a draft, that is especially worth doing.