Privacy policy
Last updated: 11 October 2026
This English version is provided for convenience. The French version is the legally binding one.
Who processes your data
Simon Illouz--Laurent, sole trader operating under the trade name BedLink, 14 rue Bernard Gombert, 27300 Bernay, France. Contact: simon@bedlink.fr.
Which data, and why
On bedlink.fr we collect what you choose to give us: first name, last name, email, phone, number of properties and your message, through the demo, contact and review forms and the calculators. We use them to call you back, to send you the results you asked for and, if you agree, a few emails about BedLink. We also measure site traffic (page views, referrers) in aggregate.
In the BedLink app we process the data the service needs: your account, your properties, your bookings and the messages exchanged with your guests. They are only used to run your tool.
Legal basis
Your request (pre-contractual steps) when you fill in a form, performance of the contract for app customers, your consent for audience cookies and marketing emails, and our legitimate interest in security and service improvement.
Who has access
Nobody but Simon, and the providers that host or run the service, each for its own part: Supabase (database and authentication), Vercel (hosting of the site and the app), Brevo (email sending and lead follow-up), Stripe (payments, only for customers paying online), Google Analytics (audience measurement, with your consent), PostHog (journey analytics and session replay, with your consent) and Calendly (appointment booking, if you book one). Your data is never sold or shared for other purposes.
How long
Contact and demo requests are kept 3 years after the last exchange. Customer account data is kept for the duration of the contract, then archived for as long as legal (accounting) obligations require before deletion. Audience data is kept 14 months.
Customer properties can connect their own WhatsApp Business account to BedLink to send their guests stay-related messages (booking confirmation, arrival information, departure reminder), answer their questions and see in the app the messages received and those sent from their phone. The property is the controller of this processing; BedLink carries it out on its behalf, as a processor.
Data processed: the guest's WhatsApp phone number, WhatsApp profile name, the content of the messages exchanged (text and attachments), delivery and read statuses, and the date and record of the guest's consent. It is used only for communication about the booking: no advertising messages, no purchased or imported contact lists.
Legal basis: the guest's explicit consent, given on the “Your stay” page of their booking, and the performance of their stay (contract with the property). No automated message is sent without that consent.
Withdrawal: the guest can reply STOP at any time; automated messages to their number stop immediately. They can also withdraw consent or ask for their messages to be erased by contacting the property or simon@bedlink.fr.
Recipient: messages go through the WhatsApp Business Platform (Cloud API) of Meta Platforms Ireland Limited, which acts as a processor for the property and keeps messages for at most 30 days to deliver them. Some data may be processed outside the European Union, in particular in the United States; these transfers are covered by the European Commission's standard contractual clauses included in Meta's data processing terms.
Retention: at BedLink, messages and phone numbers are kept with the property's account data, for the duration of the contract, then deleted under the same conditions. If the property disconnects WhatsApp, BedLink immediately erases its access token and stops all sending.
Your rights
You can ask to access, correct or erase your data, restrict its processing, object to a processing or request portability. One email is enough: simon@bedlink.fr. We answer within a month. If you believe your rights are not respected, you can contact the CNIL (cnil.fr).
Cookies
Anonymous audience measurement (PostHog, with no cookie and no identifier that follows you) runs for every visitor: it counts page views and sources, nothing more, and needs no consent. Detailed measurement only starts after you agree in the banner: cookies, session replay, and following your journey to sign-up. If you refuse, only the anonymous measurement remains. You can change your mind at any time via “Manage cookies” at the bottom of the page. PostHog also records how your visit unfolds, to understand where visitors get stuck: what you type into forms is masked and never reaches us. This data is hosted by PostHog in the United States, covered by the European Commission's standard contractual clauses. You can withdraw it at any time in your browser settings. The app uses cookies strictly needed to keep you signed in.
Security
Data is encrypted in transit and at rest with our hosting providers, access to the app is protected by authentication and each property only sees its own data.