Security
Security and guest data: what we do, what you control
A booking system holds your guests' names, dates and contact details. This page lists what Nuitina does to protect them, who else handles data, and what you can ask of us. It lists facts about how the system works, not badges.
How the system protects your data
Passwords are hashed
Passwords are stored only as a salted hash, never in plain text, and must be at least 10 characters. Repeated sign-in attempts are slowed down.
Each hotel sees only its own data
Every account is separate. Your bookings, guests and settings are visible to your team and to nobody else's.
Roles limit what people can do
Owner, manager, reception and housekeeping each get their own login, and the server checks the role on every action. A cleaner cannot open prices or settings.
Encrypted connections
All traffic runs over HTTPS, and browsers are told to use only HTTPS for the site. The sign-in cookie is marked secure and cannot be read by page scripts.
Keys are stored encrypted
Payment credentials and mailbox passwords that you save in Nuitina are encrypted at rest. Card numbers are never stored in Nuitina.
Backups every night
The database and the uploaded photos are backed up every night, and backups are kept for 30 days.
What we do, what you control
| What we do | What you control | |
|---|---|---|
| Access | Separate logins, roles checked on the server, hashed passwords. | Who gets a login and which role, under Settings → Team. |
| Guest data | We process it for you, only to provide Nuitina, and do not use it for our own purposes. | What you collect, such as the online registration form, and what you tell your guests. |
| Payments | Nuitina never touches the money and stores no card numbers. | Your own Stripe or PayPal account, and whether guests pay a deposit or the full amount. |
| Your data | We provide an export or delete data on request, within 30 days. | Corrections in the app and the CSV export of your reports, at any time. |
| Backups | Nightly, kept for 30 days. | Nothing to set up. Ask us if you need something restored. |
Backups are overwritten within 30 days, so deleted data leaves them too.
Who handles data
Besides us, a few providers handle data for Nuitina to work:
- A hosting provider runs the server and the database.
- An e-mail provider delivers messages to guests and to you, unless you connect your own mailbox.
- Anthropic powers the optional translation helper, which only receives texts you write about your house, not guest data. It also powers the chat assistant on our website.
- Stripe and PayPal are your choice. You connect your own account, and guests pay into it under the provider's own terms with you.
We do not sell personal data. The name of our hosting provider and the location of the server are available on request.
Data processing terms for guest data
For your guests' data you are the controller and we are the processor. The terms that say what we do and do not do are part B of our privacy policy: Privacy Policy (English) and Datenschutzerklärung (Deutsch). They cover which data we process, the sub-processors above, security, return and deletion, and transfers abroad.
Questions hotel owners ask about guest data
Is Nuitina GDPR compliant?
We work as your processor and set out the terms in our privacy policy, which follows the Swiss data protection act and, where it applies, the GDPR. We hold no certification and do not claim one. You still need your own legal basis and privacy notice towards guests.
Where is the data stored?
On a server at our hosting provider. The provider's name and the server location are available on request, write to info@nuitina.com.
Can I get all my data out?
Yes. You can export report data as CSV in the app at any time, and you can ask us for a full export. We carry it out within 30 days.
What happens to my data if I cancel?
The booking page pauses, and your data stays and can still be viewed. You can ask us to delete it at any time, and we do so within 30 days unless the law requires us to keep something.
Do you store my guests' card numbers?
No. Payments go through your own Stripe or PayPal account. Nuitina records only the amount, method and reference.
Related
Help center
Step-by-step guides for setting up Nuitina: rooms and prices, your website, Booking.com and Airbnb, payments, your team, tax and check-in.
Read moreOnline check-in
Guests fill in the registration form online before they arrive. Add upsells at booking and friendly e-mails before and after the stay.
Read morePricing
One plan with every feature, from €15 a month for up to 5 rooms and €2 for each extra room. No commission, no setup fee, 30-day free trial.
Read moreA question about your guests' data?
Write to us and the people who built Nuitina will answer.