Privacy & Legal Center

We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

• Account data: name, email address, and authentication tokens when you create an account.
• Usage data: pages viewed, features used, and interaction logs (anonymized summaries).
• Consent records: your consent choices for emails, SMS, analytics, and AI interactions.
• Trip data: travel preferences, itineraries, and saved places you create.
• Guest data (hotel concierge): room number, session data, and chat interactions — anonymized for logging.

How We Use Your Data

• To provide AI-powered travel planning and hotel concierge services.
• To improve recommendations and platform quality (using anonymized summaries only).
• To send transactional emails (itineraries, account updates) and marketing emails (with your consent).
• To generate aggregate analytics for platform partners and hotel administrators.

Data Sharing

We do not sell your personal data. We share data with:

• AI providers (OpenAI): Conversation data is sent for processing with store: false enabled, meaning OpenAI does not retain or train on your data.
• Hotel partners: Anonymized aggregate analytics only — no individual guest data is shared.
• Payment processors (Stripe, PayPal): Payment data is handled entirely by the processor; we never store card numbers.
• Service providers: Email delivery and hosting infrastructure providers, under appropriate data agreements.

Your Rights

• Access & Export: Download all your data using the tool above.
• Deletion: Delete your account and all associated data from the user menu.
• Consent management: Grant or revoke consent for emails, SMS, analytics, and AI interactions at any time.
• Rectification: Report inaccurate information about places, events, or your data.

Data Retention

We retain your data for as long as your account is active. Usage logs are retained for 24 months for analytics. Consent records are retained for 7 years to demonstrate compliance.

Security

• All data is transmitted over HTTPS.
• Authentication tokens are managed securely by the platform.
• API keys and secrets are stored server-side and never exposed to the frontend.
• Rate limiting is enforced on AI endpoints to prevent abuse.
• Audit logs track administrative and data access actions.

By using this platform, you agree to these terms:

• This platform provides AI-generated travel recommendations for informational purposes only.
• Recommendations are based on curated content but may be outdated or inaccurate. Always verify directly with venues.
• We are not liable for decisions made based on AI recommendations, including bookings, purchases, or travel plans.
• You are responsible for your own safety during travel activities.
• You must not use the platform for unlawful purposes or to abuse the service.
• We reserve the right to suspend accounts that violate these terms.
• Hotel-specific terms may apply when using a hotel's concierge portal.

This platform uses cookies and similar technologies:

• Authentication cookies: Required for login and session management. Cannot be disabled.
• Preference cookies: Store your travel preferences and settings.
• Analytics cookies: Help us understand usage patterns (with your consent).

You can manage your analytics consent in Communication Preferences. Most browsers allow you to refuse or delete cookies, but this may affect functionality.

This platform uses artificial intelligence (AI) to generate travel recommendations, itineraries, and concierge responses. Important disclosures:

• AI-generated content: Responses are generated by AI models and may contain errors or outdated information.
• No guarantees: We do not guarantee the accuracy, completeness, or timeliness of AI-generated recommendations.
• Not professional advice: AI responses are not legal, medical, financial, or safety advice. Always consult qualified professionals.
• Verification required: Always confirm availability, hours, pricing, and event requirements directly with venues.
• Privacy: Your conversation data is sent to AI providers with store: false enabled, meaning it is not retained or used for model training.
• Content sourcing: AI recommendations are grounded in a curated content library of verified places and events, with "last verified" dates shown where available.
• Human review: Quality is monitored through anonymized interaction logs. Report inaccurate or harmful AI output.

We may send you promotional emails or SMS messages only with your explicit consent. You can withdraw consent at any time.

What You Consent To (Optional)

• Marketing emails: Local tips, exclusive offers, and seasonal recommendations from your hotel.
• SMS marketing: Time-sensitive offers and event notifications (message and data rates may apply).

How to Withdraw Consent

• Use the Communication Preferences page.
• Click "Withdraw Marketing Consent" in the hotel concierge privacy panel.
• Unsubscribe from emails at any time.
• Reply STOP to any SMS to opt out of text messages.

Required service communications (booking confirmations, concierge access links) are not marketing and are sent regardless of consent.

This section describes how we process personal data on behalf of hotels and guests.

Data We Process

• Reservation data: Synced from Cloudbeds PMS — arrival/departure dates, guest first name, and email (for concierge link delivery).
• Guest session data: Anonymous concierge sessions linked to reservations via secure, hashed tokens.
• AI interaction data: Prompts and responses from the concierge chat, processed with store: false (not retained by AI providers).
• Consent records: Your privacy choices, retained for accountability.
• Integration logs: Webhook and sync event metadata for troubleshooting (no PII).

Data Retention

Each data category has a configurable retention period. After expiry, data is either deleted or anonymized (PII fields cleared) according to the hotel's retention policy. Default retention periods:

• Guest sessions: 90 days after last activity
• Guest profiles: 180 days
• AI prompts/responses: 30 days
• Cloudbeds reservation data: 365 days after departure
• Consent records: 7 years (accountability)
• Integration logs: 90 days

Your Rights

• Access & Export: Download your data from the Privacy Center.
• Deletion: Request deletion of your personal data from the concierge privacy panel.
• Rectification: Report inaccurate data.
• Withdraw Consent: Withdraw marketing consent at any time.

Sub-Processors

We use the following sub-processors to deliver the concierge service:

• OpenAI: AI model inference (with store: false)
• Cloudbeds: PMS reservation data source
• Supabase: Database and file storage
• Stripe / PayPal: Payment processing (for paid plans)

Some recommendations on this platform may generate commission, affiliate, or referral revenue. We disclose this as follows:

• Recommendations labeled "Sponsored" or "Partner" are paid placements or commission-generating referrals.
• Affiliate and booking referral links may earn us a commission at no additional cost to you. These are clearly identified as partner or referral links.
• Partner recommendations are prioritized based on commercial agreements, but are also vetted for quality.
• Commission and affiliate relationships do not affect the factual accuracy of information provided.
• Non-sponsored recommendations are based on editorial judgment and content quality.
• Hotel partners may have their own commission arrangements with local businesses, which are disclosed by the hotel.

We believe in transparency. If you believe a recommendation is improperly labeled, please report it.

If you are using a hotel's concierge portal and need to reach the hotel directly, contact details are provided on the hotel's guest welcome page. Typically available:

• Front desk: phone number listed on the guest welcome page and in-room materials.
• Support email: the hotel's published support email address.
• Emergency contact: provided by the hotel for urgent on-site assistance.
• Address: the hotel's street address, shown on the guest page.

For platform-level questions about your data or account, use the report an issue form or the data export tool above. Hotel-specific privacy notices and contact details are maintained by each hotel.

We are committed to making this platform accessible to all users, including those with disabilities, in accordance with WCAG 2.1 AA guidelines.

Our Commitments

• Keyboard navigation: All interactive elements are reachable and operable via keyboard.
• Visible focus: Focus indicators are present on all interactive elements.
• Alt text: Images include descriptive alternative text where applicable.
• Form labels: All form fields have associated labels for screen readers.
• Contrast: Text and interactive elements meet WCAG 2.1 AA contrast ratios.
• Screen reader support: Semantic HTML and ARIA attributes are used throughout.
• Accessible buttons: Buttons use proper markup with descriptive text or aria-labels.
• Non-map alternatives: Where maps are used, text-based alternatives are provided for location information.

Known Limitations

• Some third-party embedded content (e.g., venue websites) may not be fully accessible.
• Map-based interfaces may present challenges for screen reader users; text alternatives are provided where possible.

Feedback

If you encounter an accessibility barrier, please report it with the report type "Accessibility Issue." We are continuously working to improve accessibility.

We take the accuracy and safety of our content seriously. If you find information that is:

• Inaccurate (wrong hours, prices, addresses, or details)
• Outdated or no longer valid
• Harmful, offensive, or inappropriate
• An accessibility barrier
• Misleadingly labeled (e.g., undisclosed sponsored content)

Please submit a report. Our content team reviews all reports and takes corrective action, including updating or removing content when necessary.