Privacy

Hotelos One operates this service and is the data controller for the personal data described in this policy.

For any privacy question, or to exercise your rights, contact us at hello@hotelos.one.

Account and authentication data: the details needed to create and secure your account.

Hotel and team information: details about your hotel and the team members who use the platform.

Hotel Audit data: the hotel URL you provide, publicly available information about the hotel, public reviews, public listings, competitive context, the answers you give, and the report we generate.

Contact and program data: messages you send through our contact forms, beta program applications, and newsletter email addresses. We also keep basic system logs needed to run and secure the service.

We rely on performance of a contract to create accounts, give access, and run the platform for you.

We rely on our legitimate interests to respond to your messages, review beta applications, keep the service secure, and improve it, in a way that respects your rights.

We rely on your consent to send the newsletter and to load optional analytics, and you can withdraw that consent at any time.

We rely on legal obligations where the law requires us to keep certain records, for example for accounting purposes.

We use personal data to create accounts and provide access, run the platform, generate Hotel Audit reports, contact people who apply to the beta, reply to messages, and send the newsletter to those who ask for it.

We also use data to protect the service against misuse and security risks and to improve how it works.

We currently use only essential cookies, for authentication, language, consent status, and security. We do not use marketing or advertising trackers at this stage.

We use Clerk for authentication and Vercel for hosting and analytics. Vercel analytics is loaded only after a visitor gives consent through the cookie banner on our website.

You can manage your choice through the consent banner. Refusing optional cookies does not stop you from using the essential parts of the service.

We do not sell your data and we do not share it for third party marketing.

We use trusted providers who process data only as needed to run the service: Clerk for authentication, Vercel for hosting and analytics, and our email provider for sending messages and the newsletter.

Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data.

We keep personal data for as long as needed to provide the service and for the purposes described in this policy.

After that, we keep data only as long as required to meet legal, accounting, and dispute related obligations, and then we delete or anonymise it.

Under the GDPR you have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent at any time without affecting earlier processing.

To exercise any of these rights, contact us at hello@hotelos.one. You also have the right to lodge a complaint with your local data protection authority.

We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including access controls and trusted infrastructure providers.

No online service can be completely secure, so we also ask you to help by keeping your login details confidential.

The service is intended for business users and is not directed at children under 16. We do not knowingly collect personal data from children.

We may update this policy from time to time. If we make material changes, we will take reasonable steps to let you know and we will update the date at the top of this page.

For any question about this policy or your personal data, contact us at hello@hotelos.one.