Privacy Policy
This policy explains how Bellhop collects, uses, and protects your data.
Information We Collect
When you use Bellhop, we collect the following types of information:
- Account information: Email address, name, and password (hashed). If you sign in with Google, we receive your name, email, and profile photo URL from Google.
- Business information: Business name, contact details, and configuration settings you provide.
- Property data: Listing details, reservation records, and guest information synced from your property management system (e.g., Guesty).
- Communication data: Messages exchanged between hosts, guests, and the AI assistant within the platform.
- Device information: Browser user agent and IP address, stored with session records for security purposes.
How We Use Your Information
- To provide and maintain the Bellhop platform and AI assistant.
- To sync and display property management data from connected integrations.
- To facilitate communication between hosts and guests.
- To generate AI-assisted responses and recommendations.
- To authenticate your identity and secure your account.
- To send transactional emails (verification, password reset, notifications).
We do not sell your personal information. We do not use your data for advertising.
Data Storage and Security
- Passwords are hashed using Argon2 with a unique salt and application pepper.
- Authentication tokens use JWT with short-lived access tokens and longer-lived refresh tokens.
- Data is hosted on Google Cloud in the United States, in a PostgreSQL database with encryption at rest.
- Uploaded files are kept in private storage and served only after an access check; profile photos are shared through expiring links.
- Integration credentials, payment-provider keys, and AI-provider keys are additionally encrypted with AES-256 before storage.
- All connections use TLS encryption in transit.
- Each business's data is visible only to that business's members. A small number of Bellhop staff can access any account, to provide support and operate the service.
Data Retention
- Uploaded files, such as cleaning and inspection photos, are deleted automatically after one year.
- Other account, business, and guest data is kept while your account is active, and removed when you ask us to delete it (see User Rights).
Third-Party Integrations
Bellhop connects to third-party services you authorize:
- Property Management Systems (e.g., Guesty): We sync listing and reservation data to provide operational features.
- Payment Processors (e.g., Stripe): Payment data is processed directly by the provider; we store only transaction references.
- AI Providers (OpenAI and Anthropic): To draft replies and power the AI assistant, guest messages are sent to these providers along with reservation details, which can include the guest's name and contact information.
- Hosting (Google Cloud): Stores the database and uploaded files.
- Email delivery: Transactional and notification emails are sent through an email delivery provider.
- Push notifications: If you enable browser notifications, their content passes through your browser vendor's push service.
Analytics
Our website (mybellhop.ai) and the Bellhop app use Google Analytics to count visits and see which pages and screens are used. It sets analytics cookies, except for visitors in the European Economic Area, the United Kingdom, and Switzerland, whose visits are counted without cookies. Google Analytics does not store full IP addresses. In the app, we report only which kind of screen was opened (for example, "a reservation"), never the reservation, guest, message, or anything you type, and we do not identify you to Google. We do not use analytics for advertising.
User Rights
You have the right to:
- Access your information stored in Bellhop.
- Correct any inaccuracies in your account or business data.
- Delete your account and associated data, by emailing us. Closing an account in the app deactivates it; we then remove the data on request.
- Export your data upon request.
- Turn off AI-drafted guest replies, for your whole business or for a single conversation.
Contact Information
For questions or concerns about this privacy policy, contact us at support@mybellhop.ai.
Updates
We may update this privacy policy from time to time. Significant changes will be communicated via email or in-app notification.