Privacy Statement

Senmo B.V.
Based in Utrecht (HQ), Nieuwegein, Xàbia
Privacy e-mail: privacy@senmo.nl
General: info@senmo.nl · Phone: +31 (0)85 444 15 70

Senmo is the data controller for personal data collected through our own services. When professional managers use the HappyHomes platform, Senmo acts as a processor on behalf of the manager for data of owners, guests and vendors; see chapter 14.

2.1 Account data

• Name and contact details (e-mail, phone)
• Address of the monitored propertie(s)
• Login credentials (username, encrypted password)
• Payment data (via external payment providers)

2.2 Sensor data

• Energy and water consumption
• Temperature, humidity and air quality (CO₂)
• Status of doors, windows, gates
• Motion detection (presence only, no images)
• Sound level (decibels only, no audio recordings)
• Leak and smoke detection

2.3 Technical data

• IP address, device and browser type
• Platform usage statistics
• Cookie data

2.4 Communication data

• WhatsApp, SMS and e-mail notifications (if enabled)
• Customer service correspondence
• Feedback and reviews

3.1 Service delivery

Monitoring your propertie(s), sending alerts and providing consumption insights.

3.2 Customer support

Handling questions, complaints and technical support.

3.3 Service improvement

Anonymised or aggregated analysis to improve services and develop new features.

3.4 Billing and administration

Processing payments, issuing invoices and bookkeeping.

3.5 Marketing (with consent)

With your consent we inform you about new features or offers. You may withdraw consent at any time.

3.6 Legal obligations

To comply with laws, regulations or court orders.

• Contract: performance of the services
• Consent: marketing communication and optional features
• Legitimate interest: service improvement and fraud prevention
• Legal obligation: administration and compliance

5.1 Sensor suppliers

Senmo resells IoT sensors. Hardware is supplied by Delmation and eCompany. Their privacy policies are available on their own websites.

5.2 Service providers (sub-processors)

• Lovable Cloud (Supabase, EU hosting): application database, authentication, storage
• Resend: transactional e-mail (notifications, statements, guest messages)
• Cloudflare Turnstile: bot protection on forms and logins
• Stripe (optional): payment processing when a manager enables online payments
• WhatsApp Business API / SMS gateway: notifications when enabled
• Senmo IoT platform (Delmation, eCompany): sensor and gateway integrations

5.3 Data processing agreements

With all third parties processing personal data on behalf of Senmo, data processing agreements are in place in line with the GDPR.

5.4 No selling of data

Senmo never sells your personal data to third parties for marketing or other commercial purposes.

We take appropriate technical and organisational measures:

• SSL/TLS encryption for all data in transit
• Encryption at rest in our databases
• Access control and two-factor authentication
• Regular security audits and penetration tests
• Strict need-to-know access rights
• Secure EU data centres
• Automated, encrypted backups
• Incident response procedures

• Account data: while the account is active, plus 1 year
• Sensor data: historical data up to 2 years
• Financial records: 7 years (statutory)
• Marketing consents: until withdrawal
• Customer service correspondence: 2 years after last contact

Under the GDPR you have the following rights:

• Access: know which data we process about you
• Rectification: correct inaccurate or incomplete data
• Erasure: right to be forgotten
• Restriction: restrict processing
• Data portability: receive data in machine-readable format
• Objection: object to processing
• Withdraw consent at any time

Senmo uses cookies for functional and analytical purposes. You can disable cookies in your browser settings, although this may affect functionality.

We aim to process all your data within the EEA. If processing outside the EEA is necessary, we use appropriate safeguards such as Standard Contractual Clauses (European Commission), certifications (e.g. EU-US Data Privacy Framework) or your explicit consent.

We reserve the right to amend this statement. For material changes we will inform you by e-mail or through a platform notice. The date at the top reflects the latest update.

Complaint about how we process your data? Please contact us at privacy@senmo.nl. You may also file a complaint with the Dutch Data Protection Authority:

HappyHomes is the Senmo property management platform that lets professional managers manage homes, guests, vendors and finance. For this module the following additional provisions apply alongside the statement above.

14.1 GDPR roles

• Controller: the property manager for data of owners, guests and vendors
• Processor: Senmo processes solely on the manager's instructions, under a data processing agreement
• Tenant isolation: data per manager is strictly segregated via row-level security per partner_id

14.2 What data does HappyHomes process?

• Owners: contact, IBAN, Chamber of Commerce / VAT, contracts, payouts
• Guests: name, e-mail, phone, party composition, check-in/out, language preference, chat messages (5 languages)
• Vendors: contact, certifications, ratings, work order history
• Bookings: data from Airbnb, Booking.com, Lodgify, direct iCal feeds
• Sensor data per location: water, climate, sound (dB only, no audio), motion (presence only), energy
• Finance: vendor invoices, owner statements, guest invoices, VAT, payments

14.3 Finance module and bookkeeping

Amounts are presented including 21% VAT and exportable as UBL 2.1 XML for Exact, Yuki, Twinfield and Moneybird. Stripe Connect infrastructure is prepared; online payments only become active after the manager explicitly opts in. At that point Stripe's privacy policy also applies.

14.4 Guest portal and check-in

Guests receive a personal portal with a 3-step check-in, house rules, local tips and real-time chat. Messages remain editable for 7 minutes after sending. Reviews are linked to the booking.

14.5 HappyHomes retention

• Guest data: 2 years after last stay, unless longer is legally required
• Vendor data: for the duration of cooperation, plus 1 year
• Owner statements and invoices: 7 years (tax retention)
• Work order and flow-trigger audit log: 3 years

14.6 HappyHomes sub-processors

In addition to §5.2 we use Resend, Stripe (optional), iCal feeds with Airbnb/Booking.com/Lodgify and the Senmo IoT platform. An up-to-date list is available on request via privacy@senmo.nl.