This policy explains how personal data is processed when you use the airoomier.com website, the AI front-desk assistant Mira chat window that businesses place on their own websites, and the app.airoomier.com management panel. It also serves as the information notice required under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
Who we are#
Data controller: Airoomier, Antalya, Türkiye. For all questions about your personal data: support@airoomier.com.
Three different roles#
Responsibility for personal data depends on who you are:
- Website visitors and business customers (panel users): Airoomier is the controller of your data.
- Guests who talk to Mira on a hotel, campsite or apartment website: The controller of your conversation and booking request is the business that offers the chat on its site. Airoomier processes this data on behalf of that business and under its instructions as a processor. The business's own privacy notice may also apply.
- To exercise your rights over guest data, you can contact the business first; if you write to us, we will forward your request to the business.
What data we process#
Website visitors: the name, email address, message and property type you enter in contact and demo forms; your chosen site language (stored in your browser); technical data in server logs (IP address, browser information, request time).
Business customers (panel): name, email, password (stored only as an irreversible hash), role, business details, room types, prices, knowledge-base content and panel usage records.
Guests chatting with Mira: the messages you write and Mira's replies, booking or request details you share in the chat such as name, phone, email, dates and number of guests, your language, chat time and technical data. A small record is kept in your browser only to remember that you accepted the Terms.
Please do not share credit card details, ID or passport numbers, health information or other sensitive data in the chat. Mira does not need them.
Purposes and legal bases#
- Letting Mira answer your questions, give availability and prices, and pass your booking request to the business — performance of a contract.
- Replying to contact and support requests — legitimate interests and your request.
- Security of the service, preventing abuse and spam, debugging — legitimate interests.
- Measuring the quality of AI answers and improving the system — legitimate interests.
- Meeting legal obligations and responding to authorities — legal obligation.
- Marketing emails — only with your explicit consent, which you can withdraw at any time.
About artificial intelligence#
Mira is powered by AI. Replies are generated automatically and may be wrong or incomplete. For critical information such as prices, availability and policies, rely on the business's own confirmation. Mira's replies are not an automated decision producing legal effects about you; booking requests are confirmed or declined by the business. Conversations may be recorded and reviewed to improve service quality and the system.
Who we share data with#
We do not sell your data. We share it only as needed to provide the service, with these recipient groups:
- The relevant business (the hotel, campsite or apartment you talk to).
- Infrastructure and hosting providers: server hosting, email delivery, business email and domain providers.
- AI language-model infrastructure, where chat text is processed to generate replies. Currently, replies are generated through a language-model API provided by Groq, Inc. (USA), so chat text may be transferred abroad (mainly to the USA). If we change provider, we will update this text.
- Public authorities, where a legal obligation requires it.
If data is transferred to service providers abroad, the transfer is made in line with Article 9 of KVKK.
Retention#
We keep data for as long as the purpose requires and as legal retention duties demand. When a business account is closed, account and chat data are deleted or anonymized within a reasonable period. Chat records are kept for up to 12 months and contact and support emails for up to 2 years; after an account is closed, account data is deleted within 30 days (from backups within 90 days at the latest).
Cookies and browser storage#
Our website does not use advertising or tracking cookies. Only functional entries are kept in your browser's local storage: your chosen site language, the light/dark theme preference (in the management panel), and a flag showing you accepted the Terms in the Mira window. You can delete these in your browser settings.
Security#
We restrict access to data by permission and role, store passwords irreversibly hashed and encrypt connections with HTTPS. No system is entirely risk-free; if a breach occurs, we make the notifications required by law.
Your rights#
Under Article 11 of KVKK, you have the right to learn whether your data is processed; request information; learn the purpose and whether it is used accordingly; know the recipients; request correction of incomplete or inaccurate data; request deletion or destruction; request that these actions be notified to third parties; object to an adverse result produced by automated analysis; and claim compensation for damage caused by unlawful processing.
Send requests in writing to support@airoomier.com with information that lets us verify your identity. We answer within thirty days. If you are not satisfied, you may complain to the Personal Data Protection Authority.
Changes#
We may update this policy from time to time. The current version is always published on this page and the date at the top changes. We notify registered business customers of material changes by email.
For usage conditions see the Terms of Use. The Business Service Agreement applies to businesses in addition.