Privacy policy

Last updated: October 21, 2026
Effective: October 21, 2026

1. Who we are

Airyield (“Airyield”, “we”, “us”, “our”) is an Australian business.

We provide revenue management services to short-term rental, vacation rental and accommodation operators (“clients”). We manage pricing in clients’ PriceLabs accounts (or another pricing tool we support), analyze booking performance against the market, and provide a client dashboard, reporting and advice.

This policy explains how we handle personal information when you visit our website, contact us, subscribe to our updates, request an audit, or work with us as a client or supplier. It also explains our role when we access booking data on behalf of our clients.

If you have questions, contact us at privacy@airyield.co.

2. Our two roles

When we decide how and why information is used (controller). For personal information about website visitors, newsletter subscribers, people who request an audit or call, our clients’ staff and our suppliers, we decide the purposes and means of handling it. For these purposes we are the “controller” under the GDPR and UK GDPR, and an “APP entity” under the Australian Privacy Act 1988 (Cth) to the extent it applies to us.

When we act on a client’s instructions (processor). To deliver our services, clients give us access to their PriceLabs account (or other pricing tool account) and, if they choose, read access to booking and listing data in their property management system (PMS), for example Guesty, Hostaway, Hospitable, OwnerRez or Resly. That data can include information about the client’s guests. For this data, the client is the controller and we are a “processor” (GDPR and UK GDPR), a “service provider” or “contractor” (California law) and a service provider handling information on the client’s behalf (Australia). We only use it to provide services to that client, under our agreement and data processing agreement with them.

If you are a guest who stayed at a property managed by one of our clients, please contact that operator about your information first. We will help them respond to your request.

3. Information we collect

3.1 Information you give us

• Contact details: name, email address, phone number, company name, job title.
• Business details: number of listings, markets, property management system, pricing tool, how you heard about us.
• Information in messages, call bookings and call notes.
• If you request an audit: the booking export you email to audit@airyield.co. We use it only for the audit and never share it. We do not ask for access to your accounts unless you sign up.
• If you become a client: billing contact details, invoicing information and account access details you provide.

We do not collect payment card numbers directly. Payments are processed by our payment processor, which handles card data under its own terms.

3.2 Information we collect automatically

When you use our website or client dashboard, we and our service providers collect:

• device and browser type
• IP address and approximate location derived from it
• pages viewed, referring site and time on page
• dashboard login and activity records

We use cookies and similar technologies. See section 9.

3.3 Client data we access on a client’s behalf

With the client’s authorization, we access:

• From PriceLabs (or the client’s other pricing tool): listing settings, prices, price history, minimum stays, market data and related configuration. We have read and write access so we can make approved pricing changes.
• From the client’s PMS, where the client gives us access: read access to listings, calendars and reservations. This includes stay dates, nightly rates, revenue, booking date, channel, booking status and listing details. Reservation records in a PMS can also contain guest names, contact details, guest counts and messages.

What we store. We keep the booking and performance fields needed for revenue analysis: dates, rates, revenue, channel, booking window and listing identifiers. We do not keep guest names, email addresses, phone numbers or messages in our systems.

We do not use client data to contact guests, and we do not sell it. We don’t put client data into public AI tools.

3.4 Information from other sources

We may receive your business contact details from:

• referral partners
• software marketplaces or directories where we are listed
• event organizers
• publicly available business sources such as LinkedIn and company registers

4. How we use information

As controller, we use personal information to:

• respond to inquiries and deliver audits you request
• provide, manage and bill for our services
• manage client relationships, including weekly calls and monthly reviews
• send service messages, such as dashboard notices, changes to terms and invoices
• send our newsletter and marketing emails where permitted (see section 8)
• operate, secure and improve our website, dashboard and software
• produce aggregated, de-identified benchmarks and research that do not identify any client, listing, guest or individual (see clause 9.4 of our terms of service)
• comply with legal obligations, and establish, exercise or defend legal claims

As processor, we use client data only to:

• analyze listing performance against the market
• recommend and, once a revenue manager has approved them, make pricing changes in the client’s PriceLabs account (or other pricing tool account)
• display performance and change history in the client’s dashboard
• prepare client reports and reviews
• maintain the security and integrity of our systems

5. Legal bases (EU and UK)

Where the GDPR or UK GDPR applies to our controller activities, we rely on:

• Contract: to provide services to clients and deliver audits you request.
• Legitimate interests: to run and improve our business, keep our systems secure, follow up business inquiries and send relevant business-to-business communications, where those interests are not overridden by your rights.
• Consent: for marketing where consent is required, and for non-essential cookies where required. You can withdraw consent at any time.
• Legal obligation: for tax, accounting and other legal requirements.

6. Automated processing

Our software automatically scores client listings against market data and flags listings for review. These outputs relate to property pricing, not to individuals. A revenue manager approves every change before it goes live. We do not make decisions about individuals based solely on automated processing that have legal or similarly significant effects on them.

7. Disclosure and service providers

We disclose personal information only as described here. We share it with:

• Service providers (subprocessors) who help us run our business and services under contracts that require them to protect it. They include providers of hosting and encrypted data storage, email, customer relationship management, our website analytics provider and our payment processor.
• Software platforms our clients use. For example, PriceLabs receives pricing changes we make in the client’s account. These platforms process data under their own agreements with the client.
• Professional advisers such as lawyers, accountants and insurers, under confidentiality obligations.
• Authorities, where required by law.
• A buyer or successor, if our business or assets are sold or restructured, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising (as those terms are used in California law).

Clients can ask us for the current list of subprocessors that handle client data by emailing privacy@airyield.co. We will give clients 30 days’ notice of a new subprocessor that handles client data, with the right to object, as set out in our data processing agreement.

8. Marketing

We send business-to-business marketing to:

• people who have subscribed
• people who have asked us for an audit or call
• business contacts where the law allows

Every marketing email includes a way to unsubscribe, and we act on unsubscribe requests promptly. We comply with the Spam Act 2003 (Cth), the UK Privacy and Electronic Communications Regulations, the EU ePrivacy rules as implemented locally, and the US CAN-SPAM Act.

9. Cookies and analytics

We use:

• Strictly necessary cookies: to run the website and dashboard, keep you logged in and keep the site secure.
• Analytics: our website analytics provider, to understand how the site is used.

We don’t currently use marketing or advertising cookies. If that changes, we will update this policy first.

Where the law requires consent for non-essential cookies (for example in the EU), we ask for it before setting them. Where the law allows analytics cookies with an opt-out instead (for example in the UK under the Data (Use and Access) Act 2025, subject to conditions), we give you a clear, free way to opt out. You can also block or delete cookies at any time in your browser settings.

10. International transfers

We are based in Australia. Our team and service providers may process personal information in Australia and in other countries where our service providers operate. When we transfer personal information:

• from the EU or UK to a country without an adequacy decision or UK approval, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, included in our data processing agreement.
• out of Australia, we take reasonable steps to ensure overseas recipients handle it consistently with the Australian Privacy Principles.

You can ask us for more information about the safeguards we use.

11. Security

We take reasonable technical and organizational measures to protect personal information from misuse, interference, loss, and unauthorized access, modification or disclosure. These include:

• encrypted storage, with access limited to the team working on each client’s account
• encryption in transit
• individual logins with two-factor authentication where the platform supports it, and no shared passwords
• logging of access and changes
• giving staff access only to the client accounts they work on
• not putting client data into public AI tools

No system is completely secure. If there is a data breach, we’ll notify affected clients and regulators as the law requires, including under Australia’s Notifiable Data Breaches scheme and the GDPR where it applies. We will also notify affected people where the law requires.

12. Retention

We keep personal information only as long as we need it for the purposes in this policy, or as required by law.

When a client ends their engagement, we stop accessing their PriceLabs and PMS accounts at the end of the notice period. We ask the client to remove our access. See clause 8 of our terms of service.

13. Your rights

Depending on where you live, you may have rights to:

• access the personal information we hold about you
• correct it
• delete it
• restrict or object to certain processing, including direct marketing
• data portability
• withdraw consent
• complain to a regulator

Australia: you can ask to access or correct your personal information under APPs 12 and 13. We will respond within 30 days. If you are not satisfied with how we handled a privacy complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

EU and UK: you have the rights set out in the GDPR and UK GDPR. You can complain to your local supervisory authority, or in the UK to the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve your concern first. Our complaints process: email privacy@airyield.co. We acknowledge complaints within 5 business days and aim to respond within 30 days.

California: see section 14.

Guests of our clients: we process guest information on behalf of the operator. Please send your request to the operator. If you contact us, we will forward it to them and help them respond.

To make a request, email privacy@airyield.co. We may need to verify your identity. We will not charge a fee for reasonable requests.

14. California residents

This section applies to California residents where the California Consumer Privacy Act, as amended (CCPA), applies to us.

• In the past 12 months, we collected these categories of personal information:
  • identifiers (name, email, IP address)
  • commercial information (services requested)
  • internet activity (website and dashboard usage)
  • professional information (job title, company)
• We collected them from the sources in section 3, for the purposes in section 4, and disclosed them to the categories of recipients in section 7.
• We do not sell or share personal information, as defined by the CCPA, and we do not use or disclose sensitive personal information for purposes that require a right to limit.
• You have the right to know, delete and correct personal information, and not to be discriminated against for exercising these rights. You can use an authorized agent.
• Where we process personal information on behalf of a client business, we act as its service provider or contractor and process it only for the business purposes in our contract.

15. Children

Our services are for businesses. We do not knowingly collect personal information from children through our website. Guest data processed for clients may incidentally include information about guests’ party size, which we do not use to identify individuals.

16. Third-party links and platforms

Our website links to third-party sites, and our services connect to platforms such as PriceLabs and PMS providers. Their own privacy policies govern how they handle information. We are not affiliated with or endorsed by these platforms unless we say so.

17. Changes to this policy

We may update this policy. We will post the new version here with a new “last updated” date and, for material changes, notify clients by email.

18. Contact

Airyield
Email: privacy@airyield.co

PriceLabs, Guesty, Hostaway, Hospitable, OwnerRez, Resly and LinkedIn are trademarks of their respective owners. Airyield is an independent company and is not affiliated with, endorsed by or sponsored by any of them.