Chula Sync

My dashboard Sign in Home

Privacy Policy

Effective August 31, 2026. This policy explains how Chula Sync collects, uses, stores, shares, and deletes information.

Information we collect

  • Account details, including owner or portfolio name, email address, password hash, Terms acceptance, session records, and support communications.
  • Property configuration, encrypted Chula credentials, Airbnb calendar URLs, listing names, secret ICS tokens, occupancy results, sync history, alerts, and security or audit logs.
  • If you enable Gmail features, the Gmail address, an encrypted OAuth refresh token for sending, or an encrypted Google app password for the dedicated Hosting inbox.
  • Airbnb reservation, change, and cancellation messages found in that dedicated inbox, including headers and message content needed to match and forward the exact message. Chula Sync processes these messages for the requested feature and stores delivery identifiers, status, and error history rather than a general copy of your mailbox.

How we use information

We use information only to authenticate users, operate and secure the tenant’s calendar sync, publish private ICS feeds, detect relevant Airbnb messages, send customer-visible alerts, perform customer-authorized forwarding, provide support, and comply with law. We do not sell personal information, use Gmail data for advertising, or use it to train general artificial-intelligence models.

Google user data and Limited Use

Chula Sync requests Gmail send permission only when you choose “Connect Gmail for Chula sends.” It uses that permission to send customer-authorized reservation messages from the Gmail address that Chula has on file. Inbox polling uses a separately supplied app password for the dedicated Hosting inbox; public inbox OAuth is disabled.

Chula Sync’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When information is shared

Information is shared only as needed with infrastructure and delivery providers that operate the service, with Google to complete OAuth and Gmail sends, and with the Chula or staging destination and BCC recipients you configure for forwarding. Calendar data is made available to Airbnb only through the secret ICS URL you place in Airbnb. We may disclose limited information when legally required or to investigate abuse or security incidents.

Security and storage

Production traffic uses HTTPS. Chula credentials, Gmail refresh tokens, and Gmail app passwords are encrypted at rest; login passwords are hashed; tenant access is separated; and secret calendar URLs use unguessable tokens. No Internet service can guarantee absolute security.

Retention, deletion, and your controls

You can disconnect Gmail send access, clear the saved app password, opt out of forwarding, change your password, or revoke Google access at Google Account permissions. You may request account deletion at any time by emailing [email protected]. After identity verification, tenant accounts, users, listings, stored credentials, OAuth tokens, and ICS files are deleted from the live service. Limited security or audit records and backups may remain only as needed for fraud prevention, legal obligations, and disaster recovery, after which they are deleted under the applicable retention process.

Changes and contact

Material policy changes will be posted here and users will be asked to accept a new version when required. Privacy or deletion questions may be sent to [email protected].