Privacy Policy

Last updated: January 2025

1. Introduction

The Guest Helper ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We operate in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password when you create an account
  • Property Information: Details about your vacation rental properties including addresses, amenities, house rules, and WiFi credentials
  • Payment Information: Processed securely through Stripe; we do not store your full credit card details
  • Communications: Messages you send to us for support

2.2 Information Collected Automatically

  • WhatsApp Messages: Conversations between your guests and our AI assistant
  • Usage Data: How you interact with our platform
  • Device Information: Browser type, IP address, device type

2.3 Guest Information

When guests interact with your property's WhatsApp assistant, we collect their phone numbers and message content to provide the service. This data is associated with your property account.

3. How We Use Your Information

  • To provide and maintain our service
  • To process your subscription payments
  • To respond to guest inquiries via WhatsApp on your behalf
  • To send you important service updates
  • To improve our AI assistant's responses
  • To provide customer support
  • To detect and prevent fraud or abuse

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract Performance: To provide the services you've subscribed to
  • Legitimate Interests: To improve our services and prevent fraud
  • Consent: Where you've given us explicit permission
  • Legal Obligations: To comply with applicable laws

5. Data Sharing

We may share your information with:

  • Service Providers: Stripe (payments), Twilio (WhatsApp), OpenAI (AI processing), Supabase (database), Google Cloud (hosting)
  • Legal Requirements: When required by law or to protect our rights

We do not sell your personal data to third parties.

6. Data Retention

We retain your data for as long as your account is active. WhatsApp conversation logs are retained for 12 months. After account deletion, we will remove your personal data within 30 days, except where we need to retain it for legal purposes.

7. Your Rights (GDPR)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Restriction: Limit how we process your data
  • Objection: Object to certain processing activities
  • Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at support@theguesthelper.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), secure data storage, access controls, and regular security reviews.

9. International Transfers

Your data may be processed outside the European Economic Area (EEA) by our service providers. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data.

10. Cookies

We use essential cookies to operate our service (authentication, preferences). We do not use tracking or advertising cookies. You can control cookies through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform. Continued use of our service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

The Guest Helper

Email: support@theguesthelper.com

13. Supervisory Authority

If you are in the EU and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.