Privacy Policy

This Privacy Policy explains how Guestality LLC ("Guestality," "we," "us") collects, uses, shares and protects information when you use guestality.co, our guest pages, our NFC bracelets, rings and cards, QR codes, and our private texting service (together, the "Service").

There are two kinds of people who use Guestality:

• Professionals: hospitality workers (such as servers, bartenders and sommeliers) who create an account and keep a personal Guest Book.
• Guests: people who visit a professional's guest page and choose to save the professional's contact or join their Guest Book.

1. Information we collect

From professionals: name, email address, password (stored only in encrypted form), mobile number, job title, venue, city, ZIP code, profile photo, welcome message, your public page name, plan and billing status, device orders and shipping address, and the guest records, notes and visits you enter.

From guests: the name, mobile number and (optionally) email address you enter when you ask to join a Guest Book, the date of your request, whether you ticked the optional texting box (with the exact wording shown and the time), and whether you verified your number (with a one-time code, or a verification link the professional sends at your request). Your request waits for the professional to accept, reject or block it; until they accept, you are not in their Guest Book. A professional may add details about you to their Guest Book, such as visit history, preferences, allergies or dietary needs, and special dates like birthdays.

Text messages: if you text with a professional through Guestality, we store the messages, their delivery status, and any STOP or START requests.

Usage information: when a guest page is opened, we record limited technical events (for example, that the page opened, that a contact card was handed to the browser, or that the join form succeeded or failed), the browser and device type, and the time. We do not record a guest's name, phone number or email in these logs. We use them only to fix problems and keep the Service working.

Spam and abuse protection: the Guest Book form uses Cloudflare Turnstile, a security check that may look at technical signals from your browser to tell people from automated programs; Cloudflare processes this under its own privacy policy. To limit repeated requests, our server keeps a scrambled, one-way code made from your network (IP) address together with a secret key — never the address itself — for up to 30 days, along with short-lived request counters (up to 2 days). One-time verification codes are stored only in scrambled form and deleted within 7 days. Only the Guestality security team can see this information.

Website measurement: to understand how people find Guestality and where sign-up gets stuck, our website keeps a random identifier in your browser's storage and records a few anonymous steps (for example, that the homepage was viewed, a sign-up button was tapped, or the sign-up form was sent), the website or campaign that sent you, and whether you used a phone or computer. We do not record your name, email, or what you type in these steps, and we do not use third-party advertising trackers. If your browser sends a Global Privacy Control or Do Not Track signal, we skip this measurement. When you create an account, the same anonymous identifier is kept with your account so we can count completed sign-ups.

Payments: card payments are handled by Stripe. Guestality never receives or stores your full card number.

We do not collect government ID numbers, medical histories, or payment card numbers in the Guest Book, and professionals must not enter them.

2. How we use information

• To run the Service: show guest pages, save Guest Book entries, deliver texts and emails, and process orders and subscriptions.
• To confirm phone numbers and prevent spam, fraud and abuse.
• To provide support, send account and billing notices, and respond to requests.
• To help professionals write a welcome message using an AI writing tool, which only receives the professional's own title, venue, city and chosen tone. Guest information is never sent to it.
• To meet legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use guest information for advertising.

3. How information is shared

Between a guest and the professional they chose. When you join a professional's Guest Book, your details are shared with that professional only. Other professionals cannot see them.

Public profile. A professional's guest page shows only the details they choose to make public (such as name, title, venue, city, photo, welcome message and, if they choose, a phone number).

Service providers. We share information with companies that help us run the Service, only as needed for that purpose: Supabase (secure data storage), Stripe (payments and billing), Twilio (text messages), Resend (email delivery), Cloudflare (website hosting and the Turnstile security check), and our AI-writing provider. They are not allowed to use it for their own marketing.

Legal reasons. We may disclose information if required by law, to protect the safety or rights of any person, or to investigate fraud or abuse.

Business transfers. If Guestality is merged, acquired or sells its assets, information may transfer as part of that deal, subject to this Policy.

4. Text messages (SMS)

How guests opt in. A guest gives their mobile number by choosing to join a hospitality professional's Guest Book on that professional's Guestality page (reached by tapping their bracelet, ring or card, or scanning their code). Joining does not by itself mean agreeing to texts. The join form has a separate, unticked "Yes, [professional's first name] may text me" box; only a guest who ticks it and then verifies the number is theirs with a one-time code or verification link (or who texts the professional first) agrees to receive text messages from that professional, such as replies to their messages, visit and reservation details, and a one-time link to verify their number. Consent is not a condition of any purchase. See how guests opt in to texts.

What we send. Texts are personal, one-to-one conversations between a guest and the professional they chose. Message frequency varies and depends on the conversation. Guestality does not send marketing texts on a professional's behalf.

Stopping texts. Reply STOP at any time to stop receiving texts from that number. You'll get one final message confirming you've been unsubscribed. Reply START to receive texts again, or HELP for help. Message and data rates may apply.

We never sell or share phone numbers. Mobile numbers and text-messaging opt-in consent are never sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. Numbers are used only to deliver the conversation the guest asked for. We share them only with the service providers that deliver texts for us (such as our texting carrier, Twilio), and only for that purpose.

What we keep. We store the messages in each conversation, their delivery status, and opt-out requests so that STOP requests are always honored. Only the professional in the conversation and the Guestality support team can see them.

5. How long we keep information

We keep information while a professional's account is active. If a professional cancels, they can still download their data for 30 days. When a professional deletes their account, we delete their profile, Guest Book and messages, except records we must keep for legal, tax, fraud-prevention or billing reasons, and opt-out records, which we keep so that STOP requests continue to be honored. Guest Book requests a professional rejects are deleted 90 days after the decision; a blocked number is kept so the block keeps working until the professional removes it.

6. Your choices and rights

• Professionals can view, edit, export (Settings → Download My Data) and delete their information and account at any time.
• Guests can ask the professional directly to update or remove their details, reply STOP to stop texts, or email us at info@guestality.co to access, correct or delete their information. We may need to verify your identity first.
• Depending on where you live (for example, California), you may have additional rights to know, access, correct or delete personal information and to not be discriminated against for using them. Email us to make a request. We do not sell or "share" personal information for cross-context behavioral advertising.

7. Security

We use encryption in transit, private storage for photos, access controls that keep each professional's Guest Book visible only to them, optional two-step sign-in, and audit logs for support access. No system is completely secure, so please use a strong, unique password.

8. Children

The Service is not intended for children under 13, and we do not knowingly collect their information. Professional accounts are for people 18 and older. If you believe a child has given us information, contact us and we will delete it.

9. Where information is stored

Guestality is based in the United States, and information is processed and stored in the United States.

10. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new effective date and, for significant changes, notify professionals by email or in the app.

11. Contact us

Guestality LLC
Email: info@guestality.co
Website: guestality.co