Privacy Policy

Last updated: February 2026

1. Introduction

GAS (Global Accommodation System) operated by GAS Travel Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at gas.travel and related services.

2. Information We Collect

We collect information you provide directly to us, including: name, email address, business information, property details, and payment information. When you connect third-party services (such as channel managers or social media accounts), we collect authentication tokens necessary to provide our services.

3. How We Use Your Information

We use the information we collect to: provide, maintain, and improve our services; process transactions and send related information; connect your properties to channel managers and booking platforms; publish content to social media platforms on your behalf when you authorise such actions; send you technical notices, updates, and support messages; and respond to your comments, questions, and requests.

4. Third-Party Services

Our platform integrates with third-party services including channel managers (such as Beds24, Hostaway), payment processors (Stripe), and social media platforms (Facebook, Instagram). When you connect these services, your data may be shared with those providers in accordance with their own privacy policies. We only share the minimum data necessary to provide the requested functionality.

5. Facebook & Social Media Data

When you connect your Facebook Page to GAS, we request permission to publish posts on your behalf. We store your Page Access Token securely and only use it to post content you have explicitly created and approved through our campaign tools. We do not access your personal Facebook profile data, private messages, or friends list.

6. WhatsApp Business Messaging (Meta)

GAS uses the WhatsApp Business Cloud API, provided by Meta, to send booking lifecycle messages to guests (booking confirmation, cancellation, payment receipt, balance reminder) and to enable two-way support conversations between accommodation operators and GAS Support. Where an accommodation operator connects their own WhatsApp Business Account via Embedded Signup, their guests' messages are routed to that operator's own inbox; otherwise messages send through and receive replies via the GAS Travel platform WhatsApp Business Account.

The information shared with Meta when we send a WhatsApp message includes: the recipient phone number, the message body (template variables such as guest first name, property name, check-in date, check-out date, booking reference or amount), and standard Meta delivery metadata. We do not share booking financial details, card data, or personally identifying information beyond what the message body itself contains.

Inbound WhatsApp messages we receive from guests or operators are stored in our messages database against the relevant account so the operator (or GAS Support) can read and reply to them. We retain WhatsApp message content for as long as the related account remains active, in line with our general Data Retention policy in section 8. Status callbacks from Meta (sent, delivered, read, failed) are stored as audit metadata against each message.

You can stop receiving WhatsApp messages from GAS at any time by replying STOP to any message; we record opt-outs and suppress further sends to that number. To exercise data subject rights specifically over WhatsApp data we hold about you (access, rectification, erasure, portability), contact privacy@gas.travel. WhatsApp itself is operated by Meta Platforms Ireland Limited; use of WhatsApp is additionally subject to Meta's WhatsApp Business Messaging Policy and their privacy terms.

7. Data Storage & Security

Your data is stored on secure servers and we implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.

9. Your Rights

Under GDPR and applicable data protection laws, you have the right to: access your personal data; rectify inaccurate data; request erasure of your data; restrict processing; data portability; and object to processing. To exercise these rights, contact us at privacy@gas.travel.

10. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking or advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@gas.travel.