Security Policies

Operator & Guest
Privacy Policy

Read about our data security standards, GDPR compliance guidelines, PCI-DSS guest booking encryption protocols, and zero-selling policies.

1. Information We Collect

To deliver our property management and channel services, we collect information across two primary categories:

  • Operator Account Details: During onboarding (Step 1), we collect your Full Name, Work Email, and Mobile Number to initialize your secure dashboard.
  • Property Synchronization Data: In Step 2, when you select your Google Business Listing, we fetch your public business profile name, category, localized address, and coordinates to pre-populate your booking engine.
  • Guest Booking Data: When guests utilize your direct booking engine, we securely process reservation names, contact coordinates, dates of stay, and encrypted credit card tokens (compliant with PCI-DSS standards).

2. How We Use Collected Data

Your data is processed strictly to maintain the active services:

  • Configuring your unified booking engine, PMS calendar, and automated invoice templates.
  • Triggering real-time channel updates across OTA systems to sync reservations.
  • Dispatching transactional SMS and WhatsApp notifications to incoming guests.
  • Providing immediate assistance from our technical customer support desks.

3. Google Business Profiles Sync

By selecting your Google Business listing, you grant us permission to reference your property's public listing data to configure your custom booking engine website. We do not access your private Google account messages or write reviews on your behalf.

4. Data Storage & Encryption Protocols

All communications between your front desk browsers and our servers are encrypted using advanced Transport Layer Security (TLS 1.3). Guest credit cards are never stored directly in raw text; we partner with PCI-DSS Level 1 payment processors (e.g. Stripe, Adyen) to tokenise and secure financial parameters.

5. Cookie Policy

We utilize essential technical cookies to maintain active login sessions on your PMS dashboard and preserve currency settings or bookable slider options inside the pricing engine.

6. Sharing Limitations

We maintain a strict zero-selling policy. We never rent, trade, or distribute your operator database or guest records to third-party advertising brokers. Data is shared exclusively with critical partners (e.g. OTA APIs you connect, SMS delivery networks) necessary to execute standard reservations.

7. Your Compliance & GDPR Rights

Under the General Data Protection Regulation (GDPR) and similar global framework standards, you maintain the right to view, modify, or permanently delete your account database. To execute a data export or deletion request, contact our team at [email protected].