Privacy Policy

Effective date: October 9, 2026 · Last updated: October 9, 2026 This Privacy Policy describes how Bradley Robinson ("we", "us", or "our") collects, uses, and shares information when you request a stay at Amapas 353 through any of our booking services ("our Services"): the direct-booking website at amapas353.com ("the Site"), the Amapas Vacation Rental app in ChatGPT, and our connector in Claude. We are committed to protecting your privacy and handling your data transparently and in compliance with applicable laws, including the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Contact: Bradley Robinson, 839 Wisconsin St, San Francisco, CA 94107 USA · privacy@amapas353.com

1. Information We Collect

When you request a reservation or ask a question through the Site, we collect:

• First and last name
• Email address and phone number
• Home city, state or province, and country
• Travel dates, the configuration requested, and the number of adults and children
• The purpose of your trip and any message you write to us
• Payment card details, which are collected and held by Stripe; we never see or store your full card number

When you request a reservation through ChatGPT or Claude, we collect only what the request needs:

• First and last name
• Email address, and phone number with country code
• Travel dates and the number of guests
• Any note you ask the assistant to pass on to us

No payment card details are collected in ChatGPT or Claude. When you only check availability or ask for a price there, we receive the dates and the number of guests, and nothing that identifies you. Your conversation. Your conversation with ChatGPT is handled by OpenAI, and your conversation with Claude by Anthropic, under their own privacy policies. We receive only what the app or connector sends us when you ask it to check dates, give a price, or send a request, not the rest of your conversation.

2. How We Use Your Information

We use the information you provide solely to:

• Consider and respond to your reservation request or question
• Communicate with you about your booking, its price, payment, arrival, and departure
• Hold and, once your stay is confirmed, charge the card you provided
• After we accept a request made through ChatGPT or Claude, email you a link to add your card on the Site and confirm the stay
• Comply with legal obligations, including Mexican lodging-tax records

We do not use your information for marketing or advertising, and we do not sell your personal data.

3. Guest Screening

Before confirming a reservation, we review the request with the help of an automated report. This applies to requests made on the Site, in ChatGPT, and in Claude. The report looks at the booking itself (dates, party size, lead time), our own records of past stays, and a light search of the public web for the name, phone number, and email address you gave us. It never consults criminal, court, credit, or litigation records, and it never uses race, ethnicity, religion, age, family status, disability, or any other protected characteristic. The report is a decision aid for the owners; a person makes every decision. You may ask us for the report's conclusions about you (see Section 8).

4. How We Share Your Information

Your information is shared only with the services that run our Services and the stay:

• Lodgify, our property management system, to record the reservation and keep the calendar
• Stripe, to hold and charge your card
• Resend, to deliver our emails to you
• Cloudflare, which hosts the Site and our Claude connector and stores the Site's records
• Railway, which hosts the booking server that requests from ChatGPT and Claude pass through on their way to Lodgify, and the email delivery service that server uses to tell you your request was received
• Anthropic and Tavily, which process the guest screening described in Section 3
• Our local property managers in Puerto Vallarta, who receive your name, contact details, and dates once a stay is confirmed

We do not share your data with any other third party except as required by law.

5. Data Retention

We retain reservation records for up to 3 years for accounting and tax purposes. Questions that do not lead to a stay are kept for up to 1 year. Our Claude connector keeps no copy of your details: it passes your request on and keeps only short technical records, such as the time and which tool was used. You may request deletion of your data at any time (see Section 8).

6. Cookies and Tracking

The Site uses Google Analytics to understand how its pages are used, and Google Analytics sets its own cookies in your browser. Before a page address is sent to Google, the private part of personal links, such as payment and reply links, is removed. The Site also keeps its own anonymous, cookieless counts of how pages are used, and a short-lived cookie may be set by Cloudflare's bot check when you submit a form. The booking card shown inside ChatGPT also uses Google Analytics. Our Claude connector uses no cookies and no analytics. We do not use advertising cookies.

7. Data Security

All data travels over encrypted HTTPS connections and is stored with the services listed in Section 4, each of which publishes its own security practices. While we take reasonable precautions, no internet transmission is 100% secure.

8. Your Rights

Depending on your location, you may have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data
• Portability: request your data in a portable format
• Objection or restriction: object to or restrict certain processing
• Withdrawal of consent: where processing rests on consent, withdraw it at any time

To exercise any of these rights, write to privacy@amapas353.com. We respond within 30 days.

9. EU / EEA Residents (GDPR)

If you are in the European Union or European Economic Area, our legal basis for processing your personal data is the performance of a contract (your reservation) and our legitimate interest in deciding whom to host. You also have the right to lodge a complaint with your local data protection authority.

10. Canadian Residents (PIPEDA)

If you are in Canada, we collect, use, and disclose your personal information only with your knowledge and consent and only for the purposes described here. You may withdraw consent at any time, subject to legal or contractual restrictions.

11. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of its sale. We do not sell personal information. To submit a CCPA request, write to privacy@amapas353.com.

12. Children's Privacy

Our Services and the property are for adults. We do not knowingly collect personal information from anyone under 18. If you believe we have, please contact us and we will delete it.