Privacy policy.

1. Controller and scope

Luggage Storage BA SRL is responsible for processing personal data related to the application, Platform, bookings and Customer service.

This policy applies to data provided directly by the user and records generated while using those services.

2. Data we use

We may process first and last name, email, phone, identity document or passport, nationality and details needed to create and protect an account.

We also process booking, luggage, selected location, date, time, service status, booking code, payment and support communication information.

For security and operation, we may record limited technical information such as IP address, device, operating system, session identifiers, access logs and acceptance records.

In the Luggage Storage BA traveler app, if the user enables notifications, a technical device identifier is processed to deliver account or booking-related notices.

3. How we use data

We use data to authenticate users, complete profiles, create and manage bookings, identify the holder when receiving or returning luggage and provide assistance.

Data may also be used to confirm payments, send operational notices, prevent fraud, investigate incidents, meet legal obligations and maintain service security.

Personal data is not sold or used for purposes incompatible with those stated in this policy.

4. Required providers

The first-party platform processes authentication, private profiles and app bookings.

Mercado Pago processes electronic payments. Luggage Storage BA does not store complete card numbers or card security details.

Expo processes traveler app notification infrastructure when the user enables it. Permission can be managed from the device.

These providers receive only the data needed for their role and process it according to their own terms, security measures and legal obligations.

5. Information sharing

Booking information may be shared with the selected official store or Luggage Point as needed to receive, identify, safeguard and return luggage.

We may also share data with technical providers acting on the Company's behalf, or when required by law, a valid authority request or a reasonable need to protect users and third parties.

Personal data is not shared with third parties for independent sale.

6. Security

Data is transmitted through encrypted connections and access is limited according to role and operational need.

The Company applies technical and organizational measures intended to prevent unauthorized access, loss, alteration or improper disclosure. No system is completely infallible, so measures are reviewed according to risk and service development.

7. Retention and deletion

Data is retained while the account remains active or while needed to provide the service, support users, prevent fraud and handle claims.

In the Luggage Storage BA traveler app, users can start deletion from their profile or the public account deletion page. LSBA Partner operators can request it by email as described in section 11. Before processing it, the Company may reasonably verify identity and the status of associated bookings.

Paid booking, billing, security or incident records may be retained for the period needed to meet legal, accounting or tax obligations or to exercise and defend rights. Unnecessary identifiers will be removed or information anonymized where appropriate.

8. Data subject rights

Data subjects may request information, access, updates, rectification or deletion of their personal data under Argentine Law 25,326 and related regulations. To delete specific data without closing the whole account, email booking@luggagestorageba.com from your account email with the subject “Data deletion request”, identify the app and the data you want deleted. Do not send passwords or access codes.

To protect privacy, the Company may request reasonable information to verify the requester's identity. These rights can be exercised free of charge within the limits of applicable law.

If a request does not receive an adequate response, the data subject may file a complaint with Argentina's Access to Public Information Agency, the supervisory authority for Law 25,326.

9. Changes to this policy

The Company may update this policy to reflect legal, technical or service changes. The current version and update date will be published on this page.

Material changes may also be communicated through the application, website or email associated with the account.

10. Contact

For privacy questions or to exercise personal-data rights, email booking@luggagestorageba.com and state the reason for your request.

11. LSBA Partner: businesses and operators

LSBA Partner is the app for operating Luggage Points. It uses business accounts provisioned by Administration; the app does not allow new account registration. Permissions depend on the business and assigned role.

For access and operations we process email, account and session identifiers, access records, luggage receipt and delivery, seals, incidents, preferences and business requests. Support messages and comments are sent privately to Administration, not published as an open chat.

If the owner configures a payout account, we process the account holder name, CUIT/CUIL tax ID, bank, CBU/CVU account number, alias and contact email; contact phone is optional. We also process commissions and payout requests. These details are used to verify the account, manage payments and meet security and accounting obligations. A payout account is not needed to view or operate bookings.

Camera permission is used only to read a booking QR code on the device. LSBA Partner does not upload camera images or record audio. It does not request device location. QR content is matched locally against business bookings; when receipt or delivery is confirmed, the operation is sent to the platform.

LSBA Partner connects to our platform over HTTPS and stores its session in secure device storage. The current version has no advertising, third-party analytics or push notifications. Dashboard notifications are viewed inside the app.

Business and traveler data is available only to authorized operators as needed for their role. Downloading or sharing a receipt through the device share sheet is a user-selected action; its recipient is chosen by that user.

You may request deletion of your operator account or specific data without closing the whole account. Email booking@luggagestorageba.com from your account email with the subject “Data deletion — LSBA Partner”, identify the business and the data you want deleted. Do not send passwords or access codes.

When processing the request, personal data that is no longer needed is deleted or anonymized. Account and contact data is kept while the account is used; messages and operational records, while needed to resolve the service or a claim. Accounting, tax, payment or security records that must be retained are kept only for the period required by the relevant obligation or claim, with restricted access. Our response will identify retained data, the reason and applicable retention period; there is no general automatic deletion after 90 days.

If the requester is the only active Point owner, Administration must first arrange business continuity or appoint another owner before completing access removal. This does not prevent requests to delete personal data that need not be retained. Removing an operator does not automatically delete business records or other users' bookings.

12. Optional measurement in the Android traveler app

Android versions of Luggage Storage BA that include Google Analytics for Firebase let you choose whether app use and bookings are measured. Collection is initially disabled. You can accept or decline without affecting the service and change your choice under Measurement and privacy in Profile or Help, even without signing in.

If enabled, Google receives interactions and screens, technical app and device characteristics, installation identifiers and booking information such as transaction identifier, location, dates, luggage quantities, currency and approved amount. An IP address may be used to infer approximate location. We do not send Analytics your name, email, phone number, identity document, account identifier or precise coordinates.

Advertising measurement has a separate choice. If allowed, device identifiers, including the advertising identifier when available, and booking events may be used to attribute results in Google Ads. This integration does not enable personalized advertising or remarketing audiences in the app.

Google processes this information through Firebase and Google Analytics, and Google Ads when relevant to your advertising choice, under its terms and privacy policy. Processing may occur outside Argentina. Analytics data is retained according to the retention configured in Google Analytics and does not replace operational or accounting booking records.

Disabling measurement stops new events and resets local Analytics data; it does not automatically delete reports already generated. The app keeps a limited local checkout ledger to avoid duplicates; records older than 90 days are discarded when that ledger is read or updated. You may request information or data deletion through the channels in section 8.

This section applies exclusively to the Android traveler app with this integration. LSBA Partner and the iOS version submitted for review on October 9, 2026 do not include this analytics SDK.

13. Business statistics for app purchases

To count confirmed Luggage Points purchases and revenue, the server may send Google Analytics the amount and currency, establishment, service date and duration and luggage quantities. Each operation uses a random identifier specific to these statistics. We do not send names, emails, phone numbers, account IDs, public booking references, traveler IPs or device, installation or advertising identifiers.

This stream uses one technical server identity shared by all operations and does not link purchases with travelers or their browsing. It is not used for personal profiles, campaign attribution or personalized advertising. It is separate from optional app-use measurement and does not require enabling that SDK. Reports show confirmed purchases, not net accounting balances after refunds.

Google processes this business data under its terms and privacy policy, potentially outside Argentina, with the retention configured in Google Analytics. For questions or requests concerning these data, use the channels in section 8.