Privacy Policy

Last updated: April 2026 · Applies to guestflow.io

1. Controller

The data controller for this platform is GuestFlow, operated by Deborah Salcher, South Tyrol / Alto Adige, Italy. Privacy inquiries: deborah.salcher@gmail.com

2. Data we process

Category	Data	Legal basis
Operator account data	Email address, name, business details, Stripe payment data	Art. 6(1)(b) GDPR (Contract performance)
Guest conversation data	Chat messages, guest profile (e.g. family, dog), language, session ID (anonymous UUID)	Art. 6(1)(f) GDPR (Legitimate interest)
Technical logs	IP address (rate-limiting only, not permanently stored), server logs without PII	Art. 6(1)(f) GDPR (IT security)

3. Purposes of processing

Providing the AI concierge service to hotel guests
Managing operator accounts and subscriptions
Technical operation and security of the platform
Billing via Stripe

4. Retention periods

Conversation data: Maximum 24 months, then automatically deleted
Operator data: Until account deletion, then erased within 30 days
Stripe data: Per legal retention requirements (managed by Stripe)
Technical logs: Maximum 30 days

5. Sub-processors

Provider	Purpose	Location
Supabase	Database hosting	EU/EEA
Vercel	Web hosting and Edge Rendering	USA (SCCs)
Anthropic	Claude AI API	USA (SCCs)
Stripe	Payment processing	EU
Upstash	Redis rate-limiting	EU

US transfers rely on Standard Contractual Clauses (SCCs) under Art. 46 GDPR. See Anthropic Privacy Policy.

6. Your rights

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with the Italian data protection authority (www.garanteprivacy.it)

Contact: deborah.salcher@gmail.com

7. Technical and organisational measures

Encryption in transit: HTTPS/TLS (enforced)
Encryption at rest: Supabase database encryption
Access control: Row Level Security (RLS) on all database tables
Pseudonymisation: guests identified by anonymous session UUIDs
Data minimisation: sensitive fields never transmitted to the browser

8. Cookies and local storage

GuestFlow uses sessionStorage in the guest chat (anonymous UUID). No tracking or advertising cookies are set. The dashboard uses Supabase authentication cookies (technically necessary for login).

Last updated: April 2026.