Privacy Policy

Who we are

Argonautas is operated by Argonautas IT, LLC, a company incorporated in Delaware, USA. This policy applies to argonautas.pro (this marketing site), the self-service demo environment at demo.argonautas.pro, and the way the Argonautas Suite application (app.argonautas.pro) accesses third-party email providers, including Google (Gmail), when a subscriber chooses to connect one. Your broader use of the Argonautas Suite product is also governed by your service agreement with us.

Information we collect

When you request a demo, we collect the information you submit in the form:

• —Your name and email address
• —Your company name and number of properties (optional)
• —Any message you choose to include

We also collect limited technical data automatically, including the page you came from (referrer) and standard server logs (IP address, browser type, timestamps) used to operate and secure the site.

To understand how the site is used, we run Umami, a privacy-focused analytics tool hosted on our own servers. It records which pages are visited, which links and buttons are clicked, and how far pages are scrolled. It sets no cookies, never reads what you type into forms, and does not identify you personally. We review this data only in aggregate and do not share it with third parties.

How we use your information

• —To respond to your demo request and contact you about it
• —To provision and email you access to an isolated demo environment
• —To maintain records in our customer relationship management system
• —To operate, secure, and improve the site

We do not sell your personal data.

Connecting a third-party provider

Argonautas Suite lets subscribers connect a third-party email provider so the application can send messages, and in some cases receive them, on their behalf. Providers that support both sending and receiving — Zoho, Office 365, and custom SMTP/IMAP servers — can power the unified inbox for guest and owner correspondence. A connected Google account sends messages from your own address, and a Google Workspace mailbox can also bring correspondence into the inbox when your organization enables mailbox sync, as described under “Connected Google mailboxes” below. Providers used for outbound sending only — SendGrid, Postmark, and Resend — deliver transactional messages such as notifications and access links. Connecting a provider is optional and your choice. We request access only to what the feature you enable requires, use it solely to provide that feature, never use it for advertising, and never sell it. You can disconnect a provider at any time.

Google user data

If you choose to connect a Google account, Argonautas accesses the following Google data, and only after you grant permission through Google’s consent screen:

• —Account profile and email address: to authenticate you and identify your account (Sign in with Google).
• —Gmail — sending only (the gmail.send scope): to send and thread email messages that you compose in Argonautas from your own Gmail account, so guest and owner correspondence appears to come directly from you. On its own, this permission does not allow us to read, search, download, modify, or delete any message in your mailbox.
• —Gmail, read-only mailbox sync (the gmail.readonly scope), only for Google Workspace mailboxes whose organization has enabled mailbox sync: to read the messages in the mailbox’s Inbox and Sent folders so that correspondence with guests, owners, and partners appears in the Argonautas inbox. This permission does not allow us to modify, label, archive, or delete any message in your mailbox.

How we handle this data:

• —We use Google user data only to provide and improve the features you connect it to.
• —We do not use Google user data for advertising, and we do not sell it.
• —We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.
• —We do not transfer Google user data to others except as necessary to provide these features, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• —We do not allow humans to read your Google data, except with your explicit consent (for example, support you request), where necessary for security or to comply with law, or where the data has been aggregated and anonymized.

How we protect this data:

• —Encryption in transit: all communication between Argonautas and Google’s APIs takes place over encrypted HTTPS/TLS connections.
• —Encryption at rest: the OAuth access and refresh tokens that authorize our access to your Google account are encrypted at rest and are never stored in plain text.
• —Access controls: stored credentials and Google user data are accessible only to the authenticated application services that deliver the feature you enabled, within a multi-tenant architecture that isolates each subscriber’s data from every other subscriber.
• —Retention and deletion: when you disconnect, we delete the tokens that authorized our access and stop accessing your Google account. Messages that mailbox sync has already brought into the Argonautas inbox remain part of your organization’s records, as described under “Connected Google mailboxes” below.

Argonautas’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access at any time by disconnecting the integration inside Argonautas Suite, or from your Google Account’s security settings. When you disconnect, we stop accessing your Google account and delete the tokens that authorized that access.

Connected Google mailboxes

When a member of a property manager’s team connects their Google Workspace mailbox to Argonautas, we use Google’s Gmail API to do two things, and only these: send the replies they write in Argonautas from their own address, and, if their organization has enabled mailbox sync, read the messages in that mailbox’s Inbox and Sent folders so that conversations with guests, owners, and partners appear in the Argonautas inbox.

To decide which messages belong in the inbox, we read message headers (sender, recipients, and message identifiers). We download the full content only of messages we bring into the inbox. For every other message, such as personal mail, newsletters, or messages between colleagues, we keep only Google’s internal message identifier and the outcome, never its sender, subject, or content, and we delete that record after 30 days.

Mailbox sync works through an OAuth application that belongs to the property manager’s own Google Workspace organization, not to Argonautas. Only accounts in that organization can connect it, and the organization’s administrator can turn it off at any time. Everything under “Google user data” above applies to mailbox sync in full.

A user can disconnect their mailbox at any time from their Argonautas account settings, which also revokes our access at Google. Messages already brought into the inbox stay there as part of the property manager’s records.

Payments

Card payments for Argonautas subscriptions are processed by Stripe, Inc. You enter your card details in a secure payment form provided by Stripe within your Argonautas billing settings. Those details go directly to Stripe; they never pass through or are stored on Argonautas servers.

Argonautas stores only the Stripe references that link your account to your subscription. Through Stripe, Argonautas IT, LLC can see the limited information needed to manage your subscription: your name, email address, billing address if you provide one, card brand, last four digits and expiration date, and your payment history. We use it to bill you, send receipts, handle refunds, and answer billing questions.

Stripe is certified as a PCI DSS Level 1 Service Provider, the highest level of certification in the payments industry. Stripe may also use payment information to prevent fraud and meet its legal obligations, as described in the Stripe Privacy Policy.

If you pay by bank transfer instead, we receive the details your bank includes with the transfer, such as the account holder’s name and the payment reference, and keep them with our accounting records. Questions about billing data can be sent to privacy@argonautas.pro.

Service providers

We rely on a small number of third parties to operate the site: our hosting and infrastructure providers, email delivery for demo notifications and access links, a CRM/webhook endpoint that stores demo enquiries, and Stripe for subscription payments. These providers process data only on our behalf and under our instructions.

Where your data is stored

Our primary application data is hosted on servers located in Canada and Brazil. Some of the service providers listed above — for example our email delivery provider — may process limited personal data, such as your name and email address, in other regions, including the United States. Argonautas IT, LLC is incorporated in Delaware, USA. If you access the site from elsewhere, your information will be transferred to and processed in the locations described above.

Cookies

We use only the cookies necessary for the site to function: a security token to protect form submissions (CSRF) and a cookie that remembers your chosen language. We do not use advertising or third-party tracking cookies.

Data retention

Demo environments are disposable: each is cloned from curated seed data and automatically destroyed approximately 72 hours after creation. Demo enquiry records (name, email, company) are retained in our CRM for as long as needed to follow up and for our legitimate business records, unless you ask us to delete them. Google user data is retained as described under “Google user data” and “Connected Google mailboxes” above.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

Where we process your personal data, our lawful bases are your consent (for example, when you connect a provider or submit the demo form) and our legitimate interest in operating and securing the site and in following up on enquiries. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority (GDPR Article 77).

Children's data

The service is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

Contact

Questions about this policy or your data can be directed to privacy@argonautas.pro. Argonautas IT, LLC · argonautas.it

Changes

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.