1. Scope
This Privacy Policy applies to information processed through the 1Melo website, host application, direct-booking pages, booking widgets, reservation tools, calendar synchronization, guest messaging, payment features and related communications that link to this policy (collectively, the Services).
This policy does not govern the independent privacy practices of Airbnb, Vrbo, Booking.com, PayPal, or another website, marketplace, bank, payment provider or service that you choose to use with 1Melo. Those companies have their own privacy policies and responsibilities.
2. Hosts, guests and 1Melo’s role
Privacy responsibilities can differ depending on how you interact with 1Melo.
Hosts, property managers and team members
When you create or use a 1Melo business account, 1Melo determines how information needed to operate and secure that account is processed. This includes information such as account details, authentication records, subscription and service information, security logs and communications with us.
Guests
A vacation-rental owner or property manager using 1Melo generally determines why guest information is collected and how it is used for the rental relationship. For that information, 1Melo generally acts as a service provider or processor on behalf of the host or property manager.
1Melo may separately process limited guest information when necessary to operate and secure the Services, process transactions, prevent fraud or abuse, comply with law, maintain records, or protect the Services and their users.
Hosts and property managers are responsible for their own privacy obligations to their guests, including providing any privacy notices required by applicable law.
3. Information we collect
The information 1Melo processes depends on how you use the Services. We may process the following categories.
| Category | Examples | Why it is needed |
|---|---|---|
| Account and identity information | Name, email address, password hash, email-verification status, account role and authentication information. | Create and secure accounts, authenticate users, recover accounts and manage access. |
| Business and contact information | Business name, contact email, phone number, timezone and team membership. | Configure the host’s account, communicate with guests and support multi-user business access. |
| Property information | Property name, address, timezone, bedroom and bathroom counts, maximum occupancy, booking settings, rates, fees, taxes and rental terms. | Provide availability, quoting and direct-booking services. |
| Guest and reservation information | Guest name, email address, phone number, arrival and departure dates, guest count, reservation status, confirmation number, pricing snapshots, accepted rental terms and reservation notes. | Create and manage reservations and allow the rental business to serve its guests. |
| Guest communications | Messages exchanged between a guest and the host’s authorized team through 1Melo. | Maintain the direct-booking conversation and provide a shared communication history to authorized team members. |
| Calendar information | External iCal feed addresses, event identifiers, blocked dates, source information, synchronization status and synchronization history. | Keep availability synchronized and help prevent conflicting bookings. |
| Payment and transaction information | Payment amount, currency, transaction or capture identifiers, payment status, refund information, timestamps and related PayPal references. | Record whether a direct reservation has been paid, process authorized payment actions and reconcile refunds and payment notifications. |
| Host payment-connection information | PayPal Client ID, encrypted Client Secret, webhook identifier, connection status and verification timestamps. | Connect the host’s PayPal Business account and operate the host’s direct-payment integration. |
| Technical and security information | IP address, browser and device information, user agent, timestamps, session information, requested pages, security events and audit information. | Operate, troubleshoot and secure the Services, prevent abuse and investigate errors or unauthorized activity. |
| Support and correspondence | Information you provide when emailing us or requesting support. | Respond to questions, troubleshoot problems and maintain a record of support communications when appropriate. |
Please do not submit Social Security numbers, government identification numbers, medical information, or other sensitive information that the Services do not request or need.
4. Where information comes from
We may receive information:
- Directly from you, such as when you create an account, configure a property, make a direct reservation, send a message or contact support.
- From a host or property manager, when a rental business uses 1Melo to create or manage a reservation on a guest’s behalf.
- From calendar feeds you choose to connect, when a host supplies an external iCal address for availability synchronization.
- From PayPal, such as transaction identifiers, payment status, refund status and webhook notifications related to a payment initiated through the Services.
- Automatically from your browser or device, such as standard server, session and security information generated when accessing the Services.
1Melo does not operate as a data broker and does not purchase lists of guest information for resale.
5. How we use information
We use personal information as reasonably necessary to:
- provide, maintain and secure the Services;
- create, authenticate and administer accounts;
- verify email addresses and support password recovery;
- create and manage direct reservations;
- calculate rates, fees, taxes and reservation totals;
- synchronize availability through iCal feeds;
- enable direct guest messaging;
- connect a host’s PayPal account and maintain payment and refund records;
- send reservation, account and other service-related messages;
- provide customer support;
- detect, prevent and investigate fraud, abuse and security events;
- diagnose errors and improve reliability and usability;
- enforce our Terms and protect our users, rights and property;
- comply with applicable laws, court orders and legal obligations.
We do not use guest reservation contact information for unrelated behavioral advertising, and we do not sell guest lists.
7. PayPal and payment information
Hosts may connect their own PayPal Business account to accept payments for direct reservations. Guest payments are processed through PayPal, not by 1Melo acting as a bank or card processor.
1Melo may receive and retain information such as payment amount, currency, PayPal transaction or capture identifiers, payment status, refund information and related timestamps so that the reservation record accurately reflects what PayPal reports.
1Melo does not store a guest’s full credit-card number or bank-account number. Payment credentials entered into PayPal are handled by PayPal.
When a host connects PayPal to 1Melo, the PayPal Client Secret used by the integration is encrypted before storage and is not displayed back to the host after it has been stored.
PayPal independently determines how it processes personal information for its payment services and acts as an independent controller for applicable payment data. PayPal’s processing is governed by PayPal’s own privacy terms.
8. Calendar synchronization and feed privacy
1Melo uses the iCalendar (iCal) format to exchange availability information with external booking platforms and other calendar systems chosen by the host.
Calendars imported into 1Melo
When a host connects an external iCal feed, 1Melo retrieves calendar information needed to determine which dates are unavailable and to maintain synchronization history. Imported calendar events block availability; they are not converted into 1Melo guest reservations.
Calendars published by 1Melo
1Melo’s outbound property calendar is designed to communicate blocked or unavailable dates. It does not publish guest names, email addresses, phone numbers, message contents or payment information.
Published calendar addresses contain a private access token. Anyone who obtains that address may be able to read the property’s blocked dates, so hosts should treat the calendar address like a password and generate a new address if it is accidentally disclosed.
10. Data retention
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, maintaining accurate business records, protecting accounts, resolving disputes, preventing abuse and meeting legal obligations.
Retention periods vary by type of information. Account and business information may be retained while an account is active and for a reasonable period afterward. Reservation, payment, refund, message and audit records may be retained longer when needed to preserve the history of a transaction, resolve a dispute or satisfy legal, accounting or security requirements.
Temporary verification, password-recovery and security records expire or are invalidated according to their intended purpose. Information in backups may remain until those backups are rotated or securely replaced.
When information is no longer reasonably needed, we may delete it, de-identify it or aggregate it, subject to applicable legal requirements.
11. Security
We use administrative and technical safeguards designed to protect information from unauthorized access, alteration, disclosure or loss. Depending on the information involved, these safeguards include access controls, role-based permissions, secure authentication and session controls, password hashing, encryption of stored PayPal secrets, audit records and protections for sensitive application actions.
No website, network, database or method of transmission can be guaranteed to be completely secure. Users are responsible for choosing strong passwords, protecting account credentials and promptly notifying us if they believe an account or private calendar address has been compromised.
If a security incident requires notification under applicable law, we will provide the required notices.
12. Your privacy rights and choices
Depending on where you live and how we process your information, applicable privacy law may give you rights to request access to, correction of, deletion of, or a copy of personal information about you. Some jurisdictions may also provide rights to object to or restrict certain processing, request data portability, withdraw consent where processing is based on consent, or appeal a privacy request decision.
Hosts and team members can update certain account and business information directly through the 1Melo application.
To make a privacy request, email info@1melo.com with the subject Privacy Request. Tell us what you are requesting and provide enough information for us to locate the relevant account or records.
We may need to verify your identity before completing a request. We will use information provided for verification only as reasonably necessary to verify and process the request.
Requests involving a guest reservation
If your request concerns information controlled by a vacation-rental owner or property manager, we may direct the request to that business or assist the business in responding. The host or property manager may be the party responsible for deciding whether and how the request should be fulfilled.
Privacy rights are subject to exceptions under applicable law. For example, information may sometimes need to be retained to complete a transaction, preserve financial records, prevent fraud, establish or defend legal claims, or comply with another legal obligation.
13. California privacy disclosures
California residents may have additional rights under applicable California privacy laws. Depending on whether a particular law applies to 1Melo and to the information involved, those rights may include the right to know or access personal information, request correction, request deletion, receive certain information in a portable format, opt out of the sale or sharing of personal information, and receive equal service and pricing without unlawful discrimination for exercising a privacy right.
1Melo does not sell personal information and does not share personal information for cross-context behavioral advertising.
We therefore do not currently maintain a “Do Not Sell or Share My Personal Information” link because there is no sale or sharing activity of that kind to opt out of. If our practices change, we will update this policy and provide any controls required by applicable law before engaging in the new practice.
We will not unlawfully discriminate against you for exercising an applicable privacy right.
An authorized agent may submit a request where applicable law permits it. We may request information reasonably necessary to verify the agent’s authority and the identity of the person whose information is involved.
14. International users
1Melo is operated from the United States. If you access the Services from another country, your personal information may be transferred to and processed in the United States and other locations where our service providers operate.
Where the laws of the European Economic Area, United Kingdom, Switzerland or another jurisdiction apply, our legal basis for processing may include performance of a contract, steps requested before entering a contract, compliance with legal obligations, legitimate interests in operating and securing the Services, and consent when consent is the appropriate legal basis.
Where applicable, individuals may have rights to access, rectify, erase, restrict or object to processing, obtain portable data, withdraw consent where consent is relied upon, and complain to an appropriate data-protection authority.
Where applicable law requires a specific mechanism for an international transfer of personal information, we will use an appropriate lawful mechanism.
15. Children’s privacy
1Melo is a business and vacation-rental management service and is not directed to children under 13. We do not knowingly solicit personal information directly from children under 13.
If you believe a child has provided personal information directly to 1Melo inappropriately, contact info@1melo.com so we can review the situation.
16. Changes to this Privacy Policy
We may update this Privacy Policy as the Services, our practices or applicable laws change. When we make changes, we will post the revised policy on this page and update its effective date.
If a change materially affects how we use personal information, we may also provide a more prominent notice through the Services, by email, or by another reasonable method when appropriate or required by law.
17. Contact us
Questions about this Privacy Policy or 1Melo’s privacy practices can be sent to:
1Melo
Email:
info@1melo.com
For a request to access, correct or delete personal information, use the subject line Privacy Request.