Privacy Policy

This Privacy Policy describes how BBOnline ("we," "us," or "our") collects, uses, and shares personal information when you use the BB Online vacation-rental booking website at booking.bbonline.co.jp (the "Website") or interact with our services through ChatGPT, Meta Muse and other integrated platforms (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our Services.

1. Personal Data We Collect

We collect the following categories of personal data in connection with providing our Services:

Booking Information

• Check-in and check-out dates
• Number of guests

This information may be collected through the Website directly or via our AI assistant integrations (ChatGPT, Claude, Meta Muse; MCP tools) when you inquire about availability or initiate a booking.

Contact Information

• Full name
• Email address
• Phone number (optional)
• Special requests or notes (optional)

Collected at checkout when you confirm a booking.

Payment Information

• Payment card details (card number, expiration date, CVC)

Payment information is collected and processed directly by Stripe, our payment processor. We do not store, access, or retain your full payment card details on our servers.

2. How We Use Your Data

We use the personal data we collect for the following purposes:

• Processing and managing bookings: To create, confirm, modify, or cancel reservations for the property you booked.
• Sending booking confirmations and communications: To deliver booking confirmation emails, updates, and other transactional communications related to your stay.
• Payment processing: To facilitate secure payment transactions through Stripe for your bookings.

3. Who We Share Your Data With

We share personal data with the following categories of third-party service providers, solely for the purposes described in this policy:

4. Your Rights and Controls

You have the following rights with respect to your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that we correct any inaccurate or incomplete personal data.
• Right to deletion: You may request that we delete your personal data, subject to any legal obligations that require us to retain certain information.

To exercise any of these rights, please contact us at privacy@bbonline.co.jp. We will respond to your request within a reasonable timeframe.

5. ChatGPT and Other AI Assistant Integrations

Our Services are accessible through a ChatGPT integration that uses the Model Context Protocol (MCP). When you interact with our booking services via ChatGPT, the following applies:

• Data shared with the MCP server: Conversation context relevant to bookings, including requested dates, guest counts, and availability queries, is transmitted to our MCP server to process your request.
• No conversation history collected: We do not collect, store, or retain any conversation transcripts or chat history from your interactions with ChatGPT.
• Minimum necessary data: Only the minimum data necessary to answer your request is processed: dates, number of guests, the area or property you ask about, and your question about a property. We do not collect or use any data beyond what is required to search properties, check availability, provide pricing information, or answer questions from the owner's verified notes.
• No personal details in ChatGPT: The ChatGPT plugin does not ask for your name, email, phone number or payment details. To book, it opens this website, where the booking form and payment are covered by the rest of this policy.
• Meta Muse and other assistants: The same read-only tools are offered to Meta's Muse assistant and other AI assistants, and the rules above apply to them in the same way. Data received through them is used only to answer your request; it is never sold, used for advertising or used to train models.
• Request log: For each request we record only the tool name, the caller's user agent, the response status and the response time, never the request contents. These records are deleted automatically after 180 days.

6. Cookies and Analytics

We use Google Analytics 4 to understand how visitors use this site — which pages are viewed, how visitors arrive, and roughly where they are browsing from. We use this only to improve the site. We do not use it for advertising, and we do not sell your data.

• Cookies we set: Google Analytics sets first-party cookies (_ga and related) containing a randomly generated identifier. They do not contain your name, email address, or booking details.
• What is collected: pages viewed, how you reached the site, device and browser type, and an approximate location (country or region) derived from your IP address by Google. We do not receive or store your IP address ourselves.
• Who it is shared with: Google LLC, acting as our analytics provider. Analytics data is retained for 14 months and then deleted.
• Automated crawlers: When automated software requests a page — a search engine crawler, or an AI assistant such as GPTBot, ClaudeBot or PerplexityBot — we record the page requested, the crawler's own self-identified name, and the country of the request. This concerns automated software rather than human visitors, and involves no personal data.
• How to opt out: You can block or delete cookies in your browser settings, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking them does not affect your ability to browse or make a booking.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmissions between your browser and our servers are encrypted using TLS (Transport Layer Security). Payment processing is handled entirely by Stripe, which is PCI DSS compliant.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Booking records are retained for the duration necessary to manage your reservation and for a reasonable period thereafter to comply with legal and accounting obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

See also our Terms of Service and Support page.