GuestsBoard ("we," "our," or "us") operates the GuestsBoard platform — including the website at guestsboard.com, the host dashboard at app.guestsboard.com, and the kiosk software running on your Raspberry Pi device. This Privacy Policy explains how we collect, use, disclose, and protect information about you.
Account information: When you register, we collect your name, email address, and password (stored as a secure hash). We never store your password in plain text.
Property content: Information you enter into the dashboard — property name, address, WiFi credentials, house rules, local recommendations, check-in/check-out instructions — is stored to power your kiosk display. This content is displayed to guests on your device.
Device data: Your Raspberry Pi device sends periodic telemetry (CPU usage, memory, disk, temperature, Wi-Fi signal strength) to our API. This data is used to show you device health in the dashboard.
Usage data: We collect standard web server logs including IP addresses, browser type, pages visited, and timestamps. We use this for security and to understand aggregate usage patterns.
Payment information: Billing is handled by Stripe. We do not store your card number or CVV. We store only a Stripe customer ID and subscription status.
AI chat logs: If you enable the AI Concierge feature, guest questions and AI responses are logged per property. This data is stored in your account and can be deleted at any time.
We do not sell your data. We do not use your property content or guest data for advertising purposes.
We share data only with service providers necessary to operate the platform:
We may disclose information if required by law, subpoena, or to protect the rights and safety of GuestsBoard or others.
We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records). Device telemetry is retained for 90 days rolling.
We use industry-standard security practices: HTTPS everywhere, bcrypt password hashing, httpOnly session cookies, and encrypted database connections. WiFi passwords stored in your property content are encrypted at rest using AES-256-GCM.
No system is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].
We use an httpOnly session cookie to keep you logged in to the dashboard. This cookie is essential for the service to function. See our Cookie Policy for details.
Depending on your location, you may have the right to:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
GuestsBoard is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal information, contact us and we will delete it promptly.
We may update this policy from time to time. We will notify registered users by email of material changes at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance.
Questions about this policy? Email [email protected] or write to:
GuestsBoard
Privacy Requests
[email protected]