Privacy

Privacy Policy

Effective October 30, 2026

This Privacy Policy explains how Guestality LLC ("Guestality," "we," "us") collects, uses, shares and protects information when you use guestality.co, our guest pages, our NFC bracelets, rings and cards, QR codes, and our private texting service (together, the "Service"). It describes our practices; it is not a request for permission. Where we need a guest's permission, such as to receive texts, we ask for it separately.

There are two kinds of people who use Guestality:

Professionals: hospitality workers (such as servers, bartenders and sommeliers) who create an account and keep a personal Guest Book.
Guests: people who visit a professional's guest page and choose to save the professional's contact or ask to join their Guest Book.

1. Information we collect

From professionals: name, email address, password, two-step sign-in settings, mobile number, job title, venue, city, ZIP code, profile and background photos, welcome message, your public page name, plan and billing status (plan, amounts, dates and payment references; card details stay with Stripe), discount codes used, referral activity, device orders and shipping address, any tip payment links you add, the texts you send and receive with a Private Number, and the guest records, notes and visits you enter. Your password is handled by our sign-in provider (Supabase), which stores a salted password hash; Guestality does not store plaintext passwords. The sign-in provider also keeps sign-in records, such as times, network (IP) addresses and browser details, for security. When you agree to the Terms of Service and acknowledge this Policy, at sign-up or later in the app, we record which versions, the wording you agreed to and when.

From guests: the name, mobile number and (optionally) email address you enter when you ask to join a Guest Book, the date of your request, whether you ticked the optional texting box (with the exact wording shown and the time), whether and when you verified your number, and the professional's decision. Your request waits for the professional to accept, reject or block it; the professional can see it while it waits, but you are not in their Guest Book until they accept it. A professional may add details about you to their Guest Book, such as visit history, preferences and special dates like birthdays.

Dining needs a guest shares: a professional may record allergies or dietary needs that a guest chooses to tell them, so they can serve that guest. These details can be sensitive, and we treat them that way: they aren't shown on the public page or to other guests or other professionals, authorized staff and service providers handle them only as described in section 3, and we do not use them for advertising, profiling or any health-care purpose. Guestality is not a health-care service. Professionals must not enter medical histories, diagnoses or guesses about anyone's health. A Guest Book note can be incomplete or out of date, so guests should always confirm allergies and dietary needs directly with the venue.

Saved professionals: on the "My saved pros" page, your list of saved professionals stays in your browser. If you choose to sign in there with your email, we store your email, your saved list and any mobile number you verify with a texted code.

Text messages: if you text with a professional through Guestality, we store the messages, their delivery status, how many segments each used, and any STOP, START or HELP requests.

Guest page activity: when a guest page is opened, we record limited technical events (for example, that the page opened, which kind of link was used, that a contact card was handed to the browser, or that the join form succeeded or failed), the browser and device type, a random visit identifier and the time. We do not record a guest's name, phone number or email in these events. We use them to fix problems and keep the Service working.

Website measurement: to understand how people find Guestality and where sign-up gets stuck, our website stores a random identifier in your browser and records a few steps (for example, that the homepage was viewed, a sign-up button was tapped, or the sign-up form was sent), the page you arrived on, the website or campaign that sent you, and whether you used a phone or computer. The identifier doesn't contain your name, but it is not anonymous: if you create an account, it is saved with your account, so earlier steps from that browser can be linked to you. We do not record your name, email, or what you type in these steps, and we do not use third-party advertising trackers. If your browser sends a Global Privacy Control or Do Not Track signal, our website does not create the identifier or send these steps. That signal doesn't stop processing needed to run and protect the Service, such as hosting and security logs, the bot check, sign-in, and the account milestones our database records for every account (confirmed sign-up, completed profile, first guest).

Spam and abuse protection: the Guest Book form uses Cloudflare Turnstile, a security check that may look at technical signals from your browser to tell people from automated programs; Cloudflare processes this under its own privacy policy. To limit repeated requests, our app stores a scrambled, one-way code made from your network (IP) address with a secret key, not the address itself, together with short-lived request counters. Separately, our hosting and infrastructure providers process IP addresses to deliver and protect the website and may keep them in their own logs. One-time verification codes are stored only in scrambled form.

Error records: when something fails, we keep a technical record of the error (which step failed, an error code, and sometimes the account involved). These records are designed to leave out guest names, phone numbers, emails and message text, and we remove values that look like them before saving; this is a minimization design, not a guarantee for every system our providers run.

Payments: card payments are handled by Stripe, including when you pay with Stripe's Link wallet. Guestality never receives or stores your full card number; Stripe may share the card brand and last four digits with us.

When you contact us: if you email us, we keep the email and our reply.

2. How we use information

To run the Service: show guest pages, handle Guest Book requests and entries, deliver texts and emails, and process orders, subscriptions and refunds.
To verify phone numbers and prevent spam, fraud and abuse, and to keep the Service secure.
To provide support, send account, billing and refund notices, and respond to requests.
To understand how people find Guestality and improve sign-up, using the website measurement described above.
To help professionals write a welcome message with an AI writing tool. Only the professional's own job title, venue, city and chosen tone are sent, through Lovable's AI gateway, to an AI model provider (currently OpenAI). Guest information is never sent to it. We ask the provider not to store these requests where that option exists, but how long they keep them is governed by their own terms.
To meet legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use guest information for advertising.

The professional a guest chose. When you ask to join a professional's Guest Book, your request and details go to that professional. Our access controls are designed so that other professionals' accounts can't see them. If you join more than one professional's Guest Book, each one keeps their own separate record.

Authorized Guestality staff. Authorized members of the Guestality team may access account and guest information when needed to provide support you ask for, keep the Service secure, investigate abuse, handle billing, or meet legal obligations. Our team tools require two-step sign-in, and actions taken in them are logged.

Public profile. A professional's guest page shows the details they choose to make public (such as name, title, venue, city, photos, welcome message and, if they choose, a phone number) to anyone who opens it. Photos are kept in private storage, but they are shown on the public page through temporary links, so anyone viewing the page can see and save them.

Service providers. These companies process information to provide their services to us:

Lovable: hosts the website and app, and relays our requests to Stripe, Twilio, Resend and our AI model provider; it also receives website error reports.
Cloudflare: network delivery for the website, and the Turnstile security check.
Supabase: database, file storage and sign-in.
Stripe: payments, billing and refunds.
Twilio and mobile carriers: delivering text messages.
Resend: delivering email.
OpenAI, through Lovable's AI gateway: the welcome-message writer (no guest information).
Microsoft: our business email, when you write to us.
Postal or shipping carriers: when we ship a device, the carrier receives the name and address on the package.

Some of these companies also use information for their own purposes under their own privacy policies, for example Stripe (fraud prevention, its Link wallet and legal compliance), Cloudflare (bot detection) and Twilio and mobile carriers (message delivery, fraud prevention and legal compliance).

Legal reasons. We may disclose information if required by law, to protect the safety or rights of any person, or to investigate fraud or abuse.

Business transfers. If Guestality is merged, acquired or sells its assets, information may transfer as part of that deal, subject to this Policy.

4. Text messages (SMS)

How guests agree to texts. A guest gives their mobile number by asking to join a hospitality professional's Guest Book on that professional's Guestality page (reached by tapping their bracelet, ring or card, or scanning their code). Asking to join does not by itself mean agreeing to texts. The join form has a separate, unticked "Yes, [professional's first name] may text me" box. A ticked box counts only after the guest proves the number is theirs with a one-time verification text and the professional accepts the request, and only while no opt-out is on record. A guest who texts the professional's Guestality number first lets the professional reply and continue that conversation about what the guest raised; it doesn't sign the guest up for recurring or unrelated messages. Agreeing is never a condition of any purchase. See how guests opt in to texts.

What is sent. Texts are personal, one-to-one conversations between a guest and the professional they chose, such as replies and visit and reservation details. A verification text contains only a one-time code or link to confirm that the number belongs to the guest who ticked the box. Message frequency varies and depends on the conversation. Guestality does not send marketing texts on a professional's behalf.

Stopping texts. Reply STOP at any time to stop receiving texts from that number. A final message confirming the opt-out may be sent, but it isn't guaranteed. STOP stops texts; it doesn't delete your details from the professional's Guest Book (ask the professional or email us for that). Reply START to receive texts again; START works only when your own STOP is what stopped the texts, and it never lifts an opt-out the professional recorded for you. Reply HELP for help. Message and data rates may apply.

We never sell or share phone numbers for marketing. Mobile numbers and text-messaging opt-in consent are never sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. They are handled only to run the conversation: by the providers that store, host, relay, secure and deliver them for us (section 3; Twilio and mobile carriers deliver the texts), and by authorized staff for support and security.

Who can see texts. The professional in the conversation, authorized Guestality staff as described in section 3, and the providers that deliver the messages.

5. How long we keep information

Professional accounts: kept while the account exists. When paid access ends, you can still download your data for 30 days. We don't currently delete an account's data automatically when its plan ends; you can delete your account at any time.
Deleting an account: we delete the profile, photos, Guest Book, notes, visits, Guest Book requests, texting permission records and text conversations. We keep: opt-out records (the professional account they belong to, the mobile number, the reason and the date), so a STOP keeps being honored; order, payment and tax records (including the payment notices our payment provider sends us); records of actions taken in our team tools and team alerts; and website measurement, guest page activity and error records, which keep only the deleted account's ID.
Guest Book requests, abuse protection and error records: we've built clean-up routines intended to delete request counters after about 2 days, one-time verification codes after about 7 days, the scrambled network-address codes after about 30 days, rejected requests about 90 days after the decision, and error records after about 90 days. Automatic running of these routines isn't confirmed yet, so until it is, these records may be kept longer. A blocked number is kept so the block keeps working until the professional removes it.
Copies outside our database: deleted information may remain in backup copies until they are overwritten, and our providers (for example Stripe, Twilio and our email providers) keep their own records under their own retention rules.

6. Your choices and rights

Professionals can view and edit their information, download it (Settings → Download My Data: profile, guests, notes, visits, Guest Book requests, texting permission records, opt-outs, and text conversations and messages), and delete their account in Settings. If an account has device orders, the order records are kept and our team may complete the deletion.
Guests can ask the professional directly to update or remove their details, reply STOP to stop texts, or email us at info@guestality.co to access, correct or delete their information. We may need to verify your identity first, and we keep an opt-out record so you aren't texted again.
Depending on where you live, you may have additional rights to know, access, correct or delete personal information and to not be discriminated against for using them. Email us to make a request. We do not sell or "share" personal information for cross-context behavioral advertising.

7. Security

We use encryption in transit, database access controls designed so each professional's account sees only their own Guest Book, private storage for photos (shown on public pages through temporary links), password hashing by our sign-in provider, optional two-step sign-in for professionals, required two-step sign-in for our team tools, and logs of actions taken in those tools. No system is completely secure, so please use a strong, unique password.

8. Children

The Service is not intended for children under 13, and we do not knowingly collect their information. Professional accounts are for people 18 and older. If you believe a child has given us information, contact us and we will delete it.

9. Where information is processed

Guestality is based in the United States. Our service providers may process information in the United States and in other countries where they or their own providers operate.

10. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new effective date and, for significant changes, notify professionals by email or in the app.

11. Contact us

Guestality LLC
Email: info@guestality.co
Website: guestality.co

Past versions: effective October 30, 2026