Privacy Policy

Last updated: June 16, 2026

DRIGUDEV SRL (Butli, we, us) respects your privacy. This Privacy Policy explains who we are, what personal information we may process, why we process it, with whom it may be shared, and what rights you may have.

This Privacy Policy applies when you:

Visit our website or marketing pages at butli.app;
Contact us or request information about Butli;
Register for or use the Butli hospitality platform as hotel staff, an administrator, or an authorized user; or
Use guest features made available to you by a hotel through Butli.

Contact: support@butli.app

Please also read our Cookie Policy, which explains how we use cookies and similar technologies.

1. Who we are

Butli is a guest communication and hotel operations platform operated by DRIGUDEV SRL, a company organized under the laws of Costa Rica.

2. Our role

Our role depends on the context:

For hotel customers (for example, subscription accounts, billing, sales, and support communications), we generally act as data controller.
For guest stay data processed because a hotel uses Butli, the hotel is typically the data controller and Butli generally acts as data processor, processing data on the hotel’s instructions.

If you are a guest and wish to exercise privacy rights relating to your stay, please contact the hotel first. We will assist the hotel where required by our agreement with them and applicable law.

3. Information we may collect

The personal information we process depends on how you interact with Butli. Broadly, it falls into the following categories.

3.1 Information you provide directly

Website visitors and prospects

Name, email address, phone number, hotel or company name, job title, and message content when you contact us or submit a form;
Account registration details if you sign up for the platform;
Communications you send to our support team.

Hotel staff and administrators

Name, email address, role, hotel association, and account settings;
Messages, notes, and support requests you send through the platform;
Operational activity necessary to provide the service (for example, actions taken in dashboards).

Guests (through hotel use of Butli)

Stay-related information provided or generated through the platform, such as name, room number, stay dates, messages, service requests, orders, concierge interactions, and optional notes or images you voluntarily submit;
Language or interface preferences where you choose them.

We do not intentionally collect payment card numbers through Butli for guest purchases. Subscription payments for Butli are handled through authorized payment providers.

3.2 Information collected automatically

When you use the Website or platform, we may automatically collect technical and usage information, such as:

IP address, browser type and version, device type, operating system, and language settings;
Pages viewed, actions taken, timestamps, and error or performance data;
Authentication and security logs necessary to protect accounts and the service.

Some of this information may be collected through cookies or similar technologies, as described in our Cookie Policy.

3.3 Information we receive from others

We may receive information from hotels, authorized users, or service providers where necessary to operate the service, for example:

Hotel-provided stay or guest details needed to enable messaging and guest services;
Payment or billing status from authorized payment providers for subscriptions;
Information needed to prevent fraud, abuse, or security incidents.

You should ensure that you have a lawful basis to provide personal information to us, including guest information processed on behalf of a hotel.

4. How we use personal information

We use personal information to:

Provide, operate, maintain, and secure the Butli platform;
Create and manage accounts and authenticate users;
Enable guest messaging, requests, orders, concierge workflows, and related hotel operations;
Respond to enquiries, provide customer support, and communicate about the service;
Manage subscriptions, billing, and account administration;
Monitor performance, troubleshoot issues, and improve functionality;
Detect, prevent, and address fraud, abuse, or security incidents;
Comply with legal obligations and enforce our terms and policies.

We do not sell personal information. We do not use guest stay data to build advertising profiles.

5. Legal bases for processing

Depending on your location and the type of processing, we rely on one or more of the following legal bases:

Contract: to provide the services you or your hotel have requested;
Legitimate interests: to operate, secure, and improve Butli, prevent abuse, and support customers, where those interests are not overridden by your rights;
Consent: where required by law, for example for certain optional communications or non-essential cookies;
Legal obligation: to comply with applicable laws, regulations, court orders, or regulatory requests.

6. How we share personal information

We may share personal information with:

Hotels, where you are a guest or where hotel staff need access to operational data within their property account;
Authorized users within a hotel account, according to role and permissions configured by the hotel;
Service providers that help us deliver the service (for example, hosting, infrastructure, email delivery, analytics, translation, customer support tools, and payment processing), subject to contractual restrictions and only as needed to perform their functions;
Professional advisers (such as lawyers, auditors, or insurers) where reasonably necessary;
Authorities or third parties when required by law, to protect rights and safety, or to establish, exercise, or defend legal claims;
A successor entity in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not publish a public list of service providers on this website. Enterprise customers may request further information by contacting support@butli.app.

7. International transfers

Your information may be processed in countries other than the country where you are located, including countries that may not provide the same level of data protection as your home jurisdiction. Where required by applicable law, we implement appropriate safeguards for international transfers of personal information.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

Guest operational data (such as messages, requests, orders, and related stay activity) is generally deleted or anonymized within approximately ninety (90) days after checkout, unless the hotel or applicable law requires a different period;
Account, billing, and business records may be retained longer where necessary for accounting, tax, legal, or dispute-resolution purposes;
Security and audit logs may be retained for a limited period appropriate to their purpose.

Retention periods may vary depending on the hotel’s instructions, your relationship with us, and legal requirements.

9. Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for activity under your account.

10. Your rights

Depending on applicable law, you may have the right to:

Access the personal information we hold about you;
Request correction of inaccurate information;
Request deletion of personal information, subject to legal exceptions;
Request restriction of processing in certain circumstances;
Object to processing based on legitimate interests;
Request data portability where applicable;
Withdraw consent where processing is based on consent;
Lodge a complaint with a supervisory authority.

How to exercise your rights

Hotel customers and Website contacts: email support@butli.app with your request. We may need to verify your identity before responding.
Guests: contact your hotel in the first instance. We will support the hotel as required by our role and contractual obligations.

We will respond within the timeframe required by applicable law.

11. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy.

12. Children

Butli is a business platform intended for use by hotels and their authorized personnel. Hotels may process information about minors traveling with a family or group for operational purposes. Such processing is the responsibility of the hotel as data controller, and hotels should provide appropriate notices and obtain any required consents.

The Website and account registration are not directed at children under 18 years of age.

13. Third-party links

The Website or platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information to them.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will be revised when material changes are made. Where appropriate, we may provide additional notice of significant changes.

Your continued use of the Website or platform after an updated version becomes effective constitutes your acknowledgment of the updated policy, unless applicable law requires a different form of notice or consent.

15. Contact us

If you have questions about this Privacy Policy or our processing of personal information, contact:

DRIGUDEV SRL
Email: support@butli.app