Who we are
This website, indavillas.com, is run by PT. Flatiro Property Management, an Indonesian limited liability company trading as IndaVillas, with its registered address at Jl. Kayu Tulang No.81, Canggu, Kec. Kuta Utara, Kabupaten Badung, Bali, Indonesia. We are responsible for the personal data described here.
For anything in this policy, email [email protected].
What we collect
What you send us in a form
When you ask for a free revenue analysis, an audit, a quote or Foundation, we receive what you type: your email address, your WhatsApp number (optional on most forms), where the villa is, how many bedrooms it has, your listing link, the plan you are interested in, and anything else you write. If you ran the listing audit first, your score comes with it.
The listing audit and the Foundation snapshot
When you paste a listing link, our server asks Apify to fetch that public listing page, so we can score it. The listing details (title, description, photos, amenities, reviews, booking settings) are public information shown by the platform.
On the Foundation page, when you ask for a snapshot, we receive your contact details and listing link together with the result. If you leave the page before the snapshot finishes, we still receive the details you entered. To compare your villa with similar ones nearby, its bedroom count and approximate location are sent to our server; that comparison is not stored.
The revenue calculator
The calculator runs entirely in your browser. Nothing you enter there is sent to us or to anyone else.
Technical data
Like every website, our web host keeps standard server logs: your IP address, browser type, the page requested and the time. They are used for security and to fix problems. When fetching a listing fails, the error is logged on our server; it describes the failed request, not you.
We do not ask for, and do not want, sensitive information such as health data, identity documents or payment card numbers.
Why we use it
- To answer your request. We use your details to prepare and send the analysis, audit, quote or snapshot you asked for. This is a step you asked us to take, before any contract.
- To follow up about it. We may email or message you about that request. Tell us to stop at any time and we will. We do not add you to a newsletter unless you ask.
- To deliver what you buy. If you buy Foundation, we use your details to deliver it and to handle the money-back guarantee. This is our contract with you.
- To keep the site safe and working. Server logs help us spot abuse and fix errors. This is our legitimate interest in running a secure site.
- To meet the law. We keep payment and accounting records for as long as tax and accounting law requires.
We do not sell or rent personal data, we do not share it with anyone for their own marketing, and we do not make automated decisions about you.
Who else handles it
We use a small number of providers to run the site. Each one only receives what it needs.
- FormSubmit
- Delivers what you send in our forms to our email inbox.
- Our email inbox runs on Gmail, where your form messages arrive. The site’s fonts also load from Google Fonts, which sees your IP address.
- Apify
- Fetches the public listing page when you use the listing audit or the Foundation snapshot. It receives the listing link only.
- Stripe
- Takes payment for Foundation on its own secure checkout page. We pass your email address to it so the form is filled in for you. We never see your card details.
- Our web host
- Stores the website and its server logs.
- Cloudflare (cdnjs), unpkg and jsDelivr
- Deliver the code libraries the pages use for animation. Your browser downloads files from them, so they see your IP address.
- Only if you follow our link to it. Instagram’s own privacy policy then applies.
We may also share data if the law requires it, or to protect our rights in a dispute.
Where it is stored
Some of these providers process data outside the country you live in, including in the United States and the European Union. Where the law requires it, we rely on the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
- Enquiries that do not lead to a contract: up to 24 months after we last heard from you, then deleted.
- Clients: for as long as the contract runs, and afterwards for as long as tax and accounting law requires.
- Server logs: for the period set by our web host, usually a few weeks.
You can ask us to delete your details sooner at any time.
Your rights
Wherever you live, you can ask us to:
- show you the personal data we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- stop contacting you, or stop using it for a particular purpose;
- withdraw a consent you gave.
Email [email protected] and we will answer within 30 days. If you are not happy with our answer, you can complain to the data protection authority where you live: in the European Union, your national supervisory authority; in Indonesia, under Law No. 27 of 2022 on Personal Data Protection.
If you become a client
When we manage revenue for your villa, we also handle booking and guest data on your behalf. That is covered by our written service agreement, not by this page. This policy only covers the website.
This site is not meant for children under 18, and we do not knowingly collect their data.
Changes and contact
If we change this policy, we will update the date at the top of the page. For any question about your data, email [email protected].
See also our terms of use.