Privacy Policy

Last updated: February 26, 2026

1. Introduction

Guestally ("we," "us," or "our") operates an SMS-based guest engagement and upsell automation platform for boutique hotels. Guestally is a platform provider. We provide the technology and infrastructure that enables our hotel partners ("Hotel Partners" or "Partners") to communicate with their guests via SMS text messaging. Each Hotel Partner operates its own dedicated phone number through the Guestally platform and maintains its own consent relationships with its guests. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at guestally.ai and use our services. Please read this policy carefully. By accessing or using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

Account Information

When you create an account, we collect your name, email address, password (stored in hashed form), and hotel property details such as property name, timezone, phone number, and email address.

Guest Communication Data

When guests interact with your property through our platform, we process SMS messages, guest phone numbers, email addresses, conversation history, and any information guests provide during those conversations.

Guest data is collected and processed on behalf of, and at the direction of, the Hotel Partner with whom the guest has a relationship. Guest data is isolated per Hotel Partner. Information collected through one hotel's phone number is never shared with or accessible to other Hotel Partners on the platform.

Hotel Property Data

We store knowledge base content you create, property settings and configuration, staff member information, upsell offers, recommendation catalogs, and automation pipeline settings.

Payment Information

Payment processing is handled by Stripe. We do not store full credit card numbers. We retain Stripe customer IDs, subscription IDs, and transaction records for billing and revenue attribution purposes.

Usage Data

We automatically collect information about how you interact with our platform, including IP addresses, browser type, device information, pages visited, features used, and timestamps.

Lead Information

When you submit your email address to download resources such as our Upsell Playbook, we collect and store your email address for resource delivery and future communications about our services.

3. How We Use Information

We use the information we collect to:

  • Provide and operate our SMS-based guest engagement platform on behalf of Hotel Partners
  • Process and respond to guest SMS communications on behalf of Hotel Partners
  • Generate automated responses and upsell recommendations
  • Operate SMS messaging infrastructure on behalf of Hotel Partners, including provisioning dedicated phone numbers, managing message delivery, processing opt-in and opt-out requests, and maintaining compliance with carrier regulations
  • Process subscription payments and upsell transactions via Stripe
  • Send transactional emails via SendGrid (verification, password resets, invoices)
  • Deliver SMS communications via Twilio
  • Analyze platform usage and improve our services
  • Provide customer support
  • Send you information about our products, features, and updates
  • Enforce our Terms of Use and comply with legal obligations

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

  • Service Providers: We share data with third-party service providers that help us operate our platform, including Stripe (payment processing), Twilio (SMS infrastructure and delivery), SendGrid (email delivery), and AI language processing services for generating automated guest engagement content. Guest communication data is transmitted to Twilio solely for the purpose of delivering SMS messages on behalf of the Hotel Partner with whom the guest has a relationship.
  • Hotel Partners: Guest communication data collected through a Hotel Partner's dedicated phone number is accessible to that Hotel Partner through their Guestally dashboard. Each Hotel Partner can only access data from their own guests, never from guests of other Hotel Partners on the platform.
  • Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
  • With Your Consent: We may share your information for any other purpose with your explicit consent.
  • Mobile Information: We do not share guest mobile phone numbers or SMS opt-in consent data with any third parties or affiliates for marketing or promotional purposes. Guest mobile data collected through one Hotel Partner's number is never shared with other Hotel Partners, advertisers, or any unrelated third parties. Mobile data is shared only with service providers necessary for SMS delivery (such as Twilio).

5. Cookies & Tracking Technologies

We use minimal tracking technologies. Our platform uses authentication tokens stored in your browser to maintain your login session. We do not use third-party advertising cookies or tracking pixels. We may use essential cookies for session management and security purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), password hashing using bcrypt, JWT-based authentication with short-lived access tokens, role-based access controls, tenant isolation ensuring Hotel Partners can only access their own data, and rate limiting to prevent abuse. While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. Conversation data is retained for the duration of your subscription and may be archived for knowledge base improvement. Upon account cancellation, we retain your data for 30 days to allow for reactivation, after which you may request deletion. We may retain certain information as required by law or for legitimate business purposes. Guest opt-out records are retained indefinitely to ensure opted-out guests are never re-messaged, even if other data is deleted.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal obligations.
  • Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Opt-Out: Opt out of marketing communications at any time by contacting us or using unsubscribe links. For SMS messages, reply STOP to any message from a Hotel Partner's Guestally-powered number.

To exercise any of these rights, please contact us at support@guestally.ai.

9. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information promptly.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
  • Right to Opt-Out: We do not sell personal information. If this changes, we will provide a clear opt-out mechanism.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, please contact us at support@guestally.ai.

11. International Users

Our services are currently designed for use in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our database is operated.

12. Do Not Track

Our website does not currently respond to Do Not Track (DNT) signals. We do not track users across third-party websites.

13. SMS/Text Messaging

Guestally operates as a platform provider that enables Hotel Partners to communicate with their guests via SMS text messaging. Each Hotel Partner is assigned a dedicated phone number through the Guestally platform. Guests interact with their hotel's phone number, not a shared Guestally number. Guestally provides the technology infrastructure, message delivery, compliance tooling, and automation capabilities that power these communications on behalf of each Hotel Partner.

Types of Messages

Messages sent through the Guestally platform on behalf of Hotel Partners may include:

  • Pre-arrival welcome information and property details
  • Check-in confirmations with room and amenity information
  • Mid-stay satisfaction check-ins
  • Service and experience offers such as late checkouts, dining packages, and local activities
  • Post-stay review requests and thank-you messages
  • Periodic re-engagement offers for past guests, including seasonal promotions and direct booking incentives

Consent

Hotel guests opt in to receive SMS messages from a specific Hotel Partner through one of the following methods: (a) by texting a keyword (such as "HELLO") to the Hotel Partner's dedicated Guestally-powered phone number during the check-in process, or (b) by providing consent through an unchecked opt-in checkbox on the Hotel Partner's direct booking or pre-arrival web form. In both cases, guests receive an automated confirmation message from the Hotel Partner's number acknowledging their opt-in and providing opt-out instructions. Consent is recorded and stored in the Guestally platform, associated with the specific Hotel Partner whose number the guest opted into. Messages are never sent to guests who have not opted in. Consent given to one Hotel Partner does not extend to any other Hotel Partner on the Guestally platform.

Message Frequency

Message frequency varies based on guest stay activity. Guests may receive between 2 and 7 messages during a typical hotel stay from the Hotel Partner whose number they opted into. Past guests who have not opted out may receive re-engagement messages from that Hotel Partner no more than once per month.

Costs

Message and data rates may apply depending on your mobile carrier and plan. Neither Guestally nor its Hotel Partners charge guests for receiving messages. Standard carrier messaging rates apply.

Opt-Out

Guests may opt out of receiving text messages from a specific Hotel Partner at any time by replying STOP to any message received from that Hotel Partner's Guestally-powered number. Opt-out requests are processed immediately, and no further messages will be sent from that number to the guest's phone. Opting out from one Hotel Partner's number does not affect consent status with any other Hotel Partner. Guests may also reply HELP at any time to receive support information.

Data Isolation

Guest mobile phone numbers, SMS opt-in consent data, and conversation history are isolated per Hotel Partner. Data collected through one Hotel Partner's phone number is never accessible to, shared with, or visible to other Hotel Partners on the Guestally platform.

No Sharing of Mobile Information

Guest mobile phone numbers and SMS opt-in consent data will not be shared with third parties or affiliates for marketing or promotional purposes. Mobile information may be shared with service providers (such as Twilio) solely for the purpose of delivering SMS messages on behalf of the Hotel Partner with whom the guest has a relationship. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by sending an email to the address associated with your account. Your continued use of our services after any modification constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Guestally

1001 Virginia Ave, Suite 200

Hapeville, GA 30354

Email: support@guestally.ai