BudBnB
Sign In

Last updated: October 25, 2026

BudBnB Terms of Service and Service Agreement

Last updated: October 25, 2026

1. Parties and Scope of the Agreement

These Terms of Service and Service Agreement (“Agreement”) are entered into between Milyem Digital Solutions, operating in Germany (“BudBnB”, “Service Provider”, “we”, “us”), and the individual or legal entity using the BudBnB Services (“User”, “you”).

Service Provider Information

  • Business name: Milyem Digital Solutions
  • Address: Badener Ring 65, 75059 Zaisenhausen, Germany
  • Email: info@milyemdigital.de
  • Website: https://budbnb.com.tr

BudBnB is a software service designed to help short-term accommodation hosts, property operators, and their authorized representatives manage properties, reservations, guests, calendars, payment tracking, and processes related to Türkiye's Identity Notification System (“KBS”).

This Agreement applies to the BudBnB website, web application, iOS and Android applications, supported browser extensions, and related Services.

By accepting this Agreement during registration, the User agrees to be bound by its terms.

2. Nature and Scope of the Services

BudBnB may provide the following features:

  • Property and listing management.
  • Reservation and accommodation calendars.
  • Automated processing of forwarded reservation emails.
  • Reservation and guest record management.
  • Check-in and check-out tracking.
  • Reservation amount and payment status tracking.
  • Preparation of information required for KBS procedures.
  • Reading identity document information through MRZ on mobile devices.
  • Assistance in completing supported KBS web forms through browser extensions.
  • Additional subscription-based features.

BudBnB is not an accommodation provider, travel agency, booking platform, law enforcement agency, or official identity notification authority.

BudBnB is not an official product, representative, or affiliate of Airbnb, the Turkish General Directorate of Security, the Turkish Gendarmerie General Command, or any other third-party organization.

Third-party names and trademarks are used solely to identify relevant services or integrations.

3. User Eligibility and Account Security

The Services are intended for individuals aged 18 or older.

The User agrees to:

  • Provide accurate and current account information.
  • Protect account credentials.
  • Monitor activities performed through the account.
  • Manage permissions granted to other users.
  • Promptly report suspected unauthorized access or security incidents.

If the User creates an account on behalf of a business or another person, the User represents that they have the necessary authority to do so.

4. User Responsibilities Regarding Accommodation Activities

BudBnB provides technical software infrastructure only.

The User is responsible for ensuring that their accommodation activities comply with applicable laws and regulations.

Depending on the activity, these may include:

  • Turkish Identity Notification Law No. 1774.
  • Turkish Personal Data Protection Law No. 6698 (“KVKK”).
  • Regulations governing short-term tourist accommodation rentals.
  • Tax, licensing, and permit requirements.
  • Applicable consumer and commercial laws.
  • Other relevant legal and administrative requirements.

The User remains responsible for obtaining required permits, maintaining legally required records, submitting official notifications, and conducting lawful accommodation activities.

Use of BudBnB does not constitute a guarantee of legal compliance.

5. Guest Personal Data and the Parties' Roles

Users may enter or otherwise process guest personal data through BudBnB.

As a general rule, the host or accommodation operator determines the purposes and legal grounds for initially collecting and processing guest personal data.

Accordingly:

  • The User may act as the data controller for guest personal data where the User determines the purposes and means of processing.
  • BudBnB acts as a data processor to the extent it processes such data on behalf of and under the instructions of the User.
  • BudBnB may act as an independent data controller for account administration, payments, billing, security, and compliance with its own legal obligations.

These roles are determined by the actual processing activities and applicable data protection law.

BudBnB does not enter into an accommodation agreement directly with guests and does not determine how the User originally obtains guest information.

6. User Obligations Regarding Guest Data

The User is responsible for:

1. Obtaining guest personal data through lawful means.

2. Providing required privacy notices under KVKK and other applicable laws.

3. Identifying an appropriate legal basis for each processing activity.

4. Obtaining valid consent where consent is legally required.

5. Ensuring data is accurate, current, relevant, and limited to what is necessary.

6. Responding to data subject requests within applicable legal deadlines.

7. Avoiding unlawful processing of third-party personal data.

8. Verifying information before submitting official notifications.

These obligations apply regardless of whether guest information is received through WhatsApp, email, booking platforms, messaging services, physical documents, or other channels.

Not all personal data processing requires consent. Other lawful grounds, including legal obligations and processing expressly permitted by law, may apply.

The User's responsibilities do not remove BudBnB's own statutory obligations as a processor or independent controller.

7. KBS Features and Official Notification Responsibilities

BudBnB provides supporting tools intended to simplify the User's official identity notification workflow.

BudBnB:

  • Is not an official KBS service.
  • Is not a law enforcement or notification authority.
  • Does not sign in to the User's KBS account.
  • Does not request KBS usernames or passwords.
  • Does not retrieve guest identity information from KBS.
  • Does not perform the final submission of KBS forms on the User's behalf.
  • Does not independently verify acceptance of an official notification.

The supported browser extension may assist in filling the appropriate KBS form opened by the User through their own authorized account.

The User must verify the information and complete the official submission themselves.

Automatically filling a form does not mean that an official notification has been successfully submitted or accepted.

KBS outages, browser compatibility issues, technical errors, incorrect information, or interruptions of BudBnB do not remove the User's statutory notification obligations.

8. Accuracy of KBS Identity Information

The User is responsible for verifying information entered manually or obtained through MRZ, including:

  • First and last names.
  • National identity or passport numbers.
  • Date and place of birth.
  • Nationality.
  • Gender.
  • Accommodation address.
  • Room information and other relevant KBS fields.

MRZ scanning and automatic form completion are technical assistance features and are not guaranteed to be error-free.

9. MRZ Scanning

BudBnB's MRZ scanning feature is available only in supported mobile applications.

For this feature:

  • Document images are processed on the mobile device.
  • Identity document or passport photographs are not stored on BudBnB servers.
  • Document photographs are not stored in the BudBnB database.
  • Text information extracted from the MRZ may be transferred to BudBnB when the User chooses to save it.
  • The User may review and correct the information before saving.

The User remains responsible for checking the accuracy of automatically extracted information.

10. Encryption and Access to KBS Information

Certain guest identity and document fields used for KBS purposes are encrypted at the application level before storage in the BudBnB database.

These fields use AES-256-GCM authenticated encryption.

A random initialization vector is used for each encryption operation, and data integrity is verified.

Encrypted fields can be decrypted only through authorized application operations.

Accordingly:

  • Authorized Users may view or modify relevant data.
  • The backend may decrypt the information when required for an authorized operation.
  • The browser extension may process the information required to fill a form.
  • KBS document information is designed not to appear unnecessarily in the extension's guest selection interface.

This architecture is not described as end-to-end encryption.

11. Deletion of KBS Data

KBS identity and document information is not stored for the purpose of maintaining a permanent identity document archive.

When the User confirms in BudBnB that the relevant KBS procedure has been completed, the corresponding KBS fields are deleted from the active database.

This confirmation does not constitute independent proof from a public authority that the notification was accepted.

Deletion of KBS fields does not automatically delete other reservation records, including:

  • Booking guest name.
  • Reservation number.
  • Accommodation dates.
  • Reservation amounts.
  • Reservation status.
  • Associated reservation emails.

Such information is subject to its own retention purposes and periods.

Data contained in backups is subject to the relevant backup retention and deletion cycles.

12. Forwarded Reservation Emails

BudBnB does not directly access the User's personal Gmail, Outlook, or other email accounts.

Users may forward reservation notifications to their assigned BudBnB email address.

BudBnB processes only the forwarded messages to create or update reservation information.

The User represents that they are legally authorized to forward such messages and have their personal data processed for this purpose.

Automated extraction may contain errors, and the User is responsible for reviewing results when necessary.

BudBnB does not access non-forwarded personal emails or the User's entire mailbox.

13. Third-Party Technical Service Providers

BudBnB may use the following providers:

OVHcloud: Main hosting infrastructure located in Strasbourg, France.

Cloudflare: Email routing, temporary object storage, message queues, Workers, and related infrastructure services.

OpenAI: AI-powered processing to extract relevant reservation information from forwarded booking emails.

Stripe: Payment and subscription processing.

Expo and mobile platform providers: Supported mobile notification and platform functionality.

Processing locations depend on the services used and their configurations.

Further information is provided in the Privacy Policy and KVKK/GDPR Privacy Notice.

14. International Data Transfers

BudBnB operates from Germany, and its main hosting infrastructure is located in France.

Guest personal data transferred by Users in Türkiye may be processed outside Türkiye.

Where applicable, transfers from Türkiye must comply with Article 9 of KVKK, including any required conditions and appropriate safeguards.

Each party is responsible for its applicable obligations and agrees to cooperate where a lawful transfer mechanism must be established.

Acceptance of these general Terms or the Data Processing Terms does not automatically replace any separately required statutory standard data transfer agreement.

Transfers outside the European Economic Area that fall within the scope of GDPR are subject to Chapter V of GDPR.

15. Subscriptions, Payments, and Renewals

BudBnB may offer free and paid features.

Subscription prices, duration, and included features are displayed before purchase.

Payments may be processed through supported third-party payment service providers.

Recurring subscriptions may renew at the end of each billing period unless otherwise specified at purchase.

Users may manage subscriptions through the relevant account settings or supported payment channels.

Cancellation may allow continued access until the end of the current paid period.

Mandatory consumer rights relating to cancellation, withdrawal, refunds, and termination remain unaffected.

16. Acceptable Use

Users must not use BudBnB to:

  • Unlawfully collect personal data.
  • Access accounts without authorization.
  • Use KBS or other government services without authorization.
  • Distribute malware.
  • Bypass security controls.
  • Interfere with service availability.
  • Create fraudulent identity or reservation records.

BudBnB may proportionately restrict access or suspend accounts for serious or repeated violations, subject to applicable law.

17. Intellectual Property and License

BudBnB software, trademarks, designs, source code, interfaces, and original content are owned by Milyem Digital Solutions or its licensors.

Users receive a limited, non-exclusive, non-transferable license to use the Services for accommodation-related activities.

The User does not transfer ownership of their property, reservation, or guest records to BudBnB under this Agreement.

BudBnB may process such records only as necessary to provide and secure the Services and comply with applicable legal obligations.

18. Service Availability

BudBnB aims to provide reliable Services through reasonable technical measures.

However, interruptions may occur due to:

  • Scheduled maintenance.
  • Server outages.
  • Network failures.
  • Third-party infrastructure failures.
  • Changes to official KBS systems.
  • Browser or operating system updates.

BudBnB does not guarantee that statutory notification deadlines will be met.

Users should maintain alternative methods for checking and completing time-sensitive legal obligations.

19. Limitations of Liability

Users are responsible for their own accommodation operations, legal permits, guest data collection, privacy notices, official notifications, and data accuracy.

BudBnB does not assume these obligations on behalf of the User.

However, nothing in this Agreement excludes BudBnB's liability for:

  • Its own personal data processing activities.
  • Its own security obligations.
  • Applicable duties as a data processor.
  • Its own wrongful or negligent conduct.
  • Any liability that cannot lawfully be excluded.

Any other limitation applies only to the extent permitted by mandatory law.

Liability for intentional misconduct, gross negligence, injury to life or bodily integrity, and other legally non-excludable liabilities remains unaffected.

20. Account Deletion and Termination

Users may request account deletion.

Access to the relevant Services will be terminated as part of the deletion process.

Associated personal data will be handled according to the retention and deletion procedures described in the Privacy Policy.

Records required for tax, accounting, or other statutory purposes may be retained for the applicable legal period.

BudBnB may take necessary and proportionate action against unlawful or contractual violations.

21. Data Protection and Privacy

Further information on personal data processing is available in the BudBnB Privacy Policy and KVKK/GDPR Privacy Notice:

https://budbnb.com.tr/privacy

Additional terms governing guest personal data processed on behalf of Users are contained in Annex 1 — Data Processing Terms.

22. Changes to this Agreement

BudBnB may update this Agreement to reflect changes to its Services, applicable laws, or technical infrastructure.

Material changes affecting Users' rights or obligations will be communicated through appropriate channels before taking effect.

Where a new acceptance is required, Users may be asked to accept the updated Agreement.

23. Governing Law and Disputes

As the Service Provider operates in Germany, this Agreement is governed by German law, subject to applicable conflict-of-law rules and mandatory legal provisions.

This does not deprive consumers residing in Türkiye of mandatory protections available under applicable Turkish consumer law or other mandatory provisions.

Turkish laws governing identity notifications, accommodation activities, personal data protection, taxation, and other public law obligations remain applicable where relevant.

Consumers retain their rights to bring claims before legally competent authorities and courts.

24. Contact

Milyem Digital Solutions

Badener Ring 65

75059 Zaisenhausen

Germany

Email: info@milyemdigital.de

Website: https://budbnb.com.tr

Annex 1 — Data Processing Terms for Guest Personal Data

A1.1. Roles of the Parties

This Annex governs the data protection obligations of the parties concerning guest personal data processed through BudBnB.

Where the User determines the purposes and means of processing guest personal data, the User acts as data controller and BudBnB acts as data processor when processing data on the User's instructions.

The actual nature of the processing and applicable law determine these roles.

A1.2. Subject Matter, Purpose, and Duration

BudBnB processes guest personal data on the User's instructions for:

  • Reservation management.
  • Accommodation record management.
  • Extraction of forwarded reservation emails.
  • Preparation of KBS information.
  • Assistance in completing KBS forms.
  • Displaying and correcting records on the User's behalf.

The duration of processing is limited to the use of the Services and the relevant data retention purposes.

A1.3. Categories of Data and Data Subjects

Data subjects may include booking holders, accommodation guests, and child guests.

Depending on the features used, personal data may include:

  • First and last names.
  • Reservation information.
  • Identity and passport information.
  • Date and place of birth.
  • Nationality.
  • Gender.
  • Accommodation dates and address.
  • Room information.
  • Relevant data contained in reservation emails.

A1.4. Instructions of the Controller

The User instructs BudBnB to process the relevant personal data for the functions described in the Services.

BudBnB will not use guest personal data for independent purposes unrelated to those instructions, except where required by applicable law.

Where an instruction appears unlawful, BudBnB may inform the User and take appropriate action to the extent legally permitted.

A1.5. Confidentiality and Security

BudBnB implements risk-appropriate technical and organizational safeguards, which may include:

  • Access controls.
  • Appropriate encryption.
  • Secure communications.
  • Data integrity checks.
  • Security logging.
  • Prevention of unauthorized access.
  • Management of system and user permissions.

Certain KBS identity fields are encrypted at the application level using AES-256-GCM.

A1.6. Subprocessors

BudBnB may engage OVHcloud, Cloudflare, OpenAI, and other necessary technical providers to deliver the Services.

By accepting this Agreement, the User grants general authorization for the use of the disclosed providers for their defined processing purposes.

Material changes to subprocessors may be communicated through appropriate channels.

BudBnB will ensure that subprocessors are subject to appropriate data protection obligations where required by law.

A1.7. Data Subject Requests

BudBnB will provide reasonable assistance, taking into account the nature of processing and available technical capabilities, to help the User respond to data subject requests.

Guest-related requests received directly by BudBnB may be referred to the relevant controller, subject to applicable legal requirements.

A1.8. Personal Data Breaches

If BudBnB becomes aware of a personal data breach affecting guest data processed on behalf of a User, BudBnB will notify the User without undue delay, providing the information reasonably available.

The parties will cooperate to investigate, address, and report the incident where required by applicable law.

A1.9. Deletion and Return of Data

When the Services terminate, the purpose of processing ends, or a valid deletion instruction is received, BudBnB will delete or otherwise handle the data in accordance with applicable legal retention requirements and technical capabilities.

KBS identity fields are deleted from the active database following the User's confirmation that the relevant KBS procedure has been completed.

A1.10. Audit and Compliance Assistance

BudBnB will provide legally required information and reasonable assistance relating to its processing activities.

Any audit must be conducted proportionately and with appropriate safeguards for confidentiality, system security, and the personal data of other customers.

A1.11. International Transfers

Where guest data is transferred outside Türkiye or, where GDPR applies, outside the European Economic Area, the parties must comply with applicable international data transfer requirements.

This Annex does not automatically replace separate statutory standard data transfer agreements where required.

A1.12. Continuing Obligations

Obligations concerning confidentiality, personal data security, legally retained records, and data subject rights continue after termination to the extent required by applicable law.