Legal · Privacy

Privacy Policy

Last updated: July 7, 2026 · We collect only what we need to run your property well.

This Privacy Policy explains how Bello Homes ("Bello Homes," "we," "us," or "our") collects, uses, shares, and safeguards information when you visit our website, book a stay directly with us, use the guest portal, use the Bello Homes Owner Dashboard or team application, or otherwise interact with our Services. We aim to be straightforward: we collect only what we need, we don't sell your data, and we use third-party tools only when they help us deliver the work.

1. Information we collect

You provide directly

• Contact details — name, email, phone number, and any messages you send through forms or email.
• Property information — address, property type, photos, descriptions, pricing preferences, and similar details needed to manage your listing.
• Owner account information — login credentials (passwords are stored hashed), payout preferences, and tax-relevant identifiers when required for invoicing or 1099 reporting.
• Documents — files you upload through the dashboard, such as receipts, agreements, or maintenance records.
• Guest booking details — if you book a stay with us directly: your name, email, phone number, party size, stay dates, and the messages you exchange with our team through the guest portal, email, or text message.

We collect automatically

• Usage data — pages viewed, links clicked, time-on-page, and the actions you take in the dashboard.
• Device data — IP address, browser type, device type, and approximate location derived from IP.
• Cookies — small files used for authentication, session management, and basic analytics. You can disable cookies in your browser, but this will impair dashboard functionality.

We collect through integrations (with your authorization)

• Booking platforms — reservation, guest, and payout data from platforms like Airbnb and VRBO when you've connected an account.
• QuickBooks Online (Intuit Inc.) — for owners with the accounting integration enabled, we read and write the data needed to create invoices and reconcile statements: company file ("realm") metadata, customer records (owner name and email used for invoicing), invoice records (line items, amounts, status), and the basic chart-of-accounts data needed for posting. We do not access employee payroll, personal Intuit account information, or unrelated company files.
• Email delivery — when we send statements, invoices, or notifications, the recipient address, subject, and delivery status pass through our email provider.

2. How we use information

• Operate, maintain, and improve the Services.
• Generate statements, invoices, and reports for your property.
• Communicate with you about your account, your property, your statements, and important updates.
• Detect, investigate, and prevent fraud, abuse, or security incidents.
• Comply with legal obligations such as tax reporting and record-keeping.

We do not use your data to train AI models, we do not sell your personal information, and we do not share it with advertisers.

3. Service providers we share with

We share information only with vendors who help us run the Services. They are bound by contractual obligations to protect your data and use it only for the purposes we specify.

Provider	Purpose	Data shared
Supabase	Database, authentication, and file storage for the Services	Account, property, booking, and operational data
Cloudflare	Website hosting, DNS, file storage, edge compute	All Service traffic and stored data
Stripe	Payment processing for direct bookings	Payment card details are entered directly with Stripe and never stored on our systems; we keep only amounts, status, and a payment reference
Intuit (QuickBooks Online)	Accounting and invoicing	Customer and invoice data for owners with the integration enabled
Mailgun	Email delivery and receiving on bellohomes.co	Recipient address, subject, and message body for emails we send and receive
OpenPhone	Business phone and text messaging (SMS)	Phone numbers and message content for stay-related texts
Booking platforms (Airbnb, VRBO, etc.)	Reservation and guest management	Property and listing data; reservation data is received from these platforms

4. Text messages (SMS)

If you provide a phone number, we may text you about your stay — booking confirmations, check-in details, and replies to questions you send us. Message frequency varies with your conversation, and message and data rates may apply. Reply STOP at any time to opt out, or HELP for help. We do not send marketing texts without your consent, and we never share your number with third parties for their marketing.

5. Your QuickBooks data, specifically

If you authorize the QuickBooks Online integration, Bello Homes stores a long-lived refresh token issued by Intuit for your company file. We use this token solely to create invoices and read the accounting data necessary to reconcile your statements. We:

• Store the token encrypted and access it only from authenticated server-side processes.
• Log every action taken against your QuickBooks data in an internal audit log.
• Allow you (or any Bello Homes admin acting on your behalf) to disconnect the integration at any time, which immediately revokes our access.
• Never sell, share, or use QuickBooks data for any purpose other than delivering the accounting features you've requested.

For more information about how Intuit handles data flowing through QuickBooks Online, see the Intuit Global Privacy Statement.

6. How we protect your data

• All Services are served over HTTPS with modern TLS configurations.
• Passwords are stored as salted hashes; we cannot view or recover your plaintext password.
• Every team and owner account requires two-factor authentication, and access to data is restricted by role.
• Access to production systems is restricted to a small group of authorized Bello Homes personnel and is protected by strong authentication.
• Sensitive third-party tokens (such as the QuickBooks refresh token) are stored in encrypted database records, separate from public-facing systems.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify affected users and take appropriate corrective action.

7. Data retention

We retain account, property, and financial data for as long as your management agreement is active and for a reasonable period afterward to comply with tax, legal, and audit requirements (typically seven years for financial records). Operational photos documenting property condition (for example, checkout documentation) are automatically archived 90 days after a case closes and permanently deleted shortly after.

Account deletion: if you hold a Bello Homes account and want it deleted, email team@bellohomes.co from the address on the account with the subject "Delete my account," or ask any administrator. We deactivate promptly and delete personal information within 30 days, except records we must keep by law. You can likewise request deletion of personal data that is not subject to a legal retention obligation.

8. Your rights

Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR), including rights to access, correct, delete, port, or restrict the processing of your personal data. To exercise any of these rights, email team@bellohomes.co. We will respond within 30 days.

9. Children

The Services are not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International data transfers

Bello Homes is based in the United States, and our service providers operate primarily in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection rules than your home country.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version at this URL and update the "Last updated" date above. For significant changes, we will also email account holders.

12. Contact us