Privacy Policy

GuestsBoard ("we," "our," or "us") operates the GuestsBoard platform — including the website at guestsboard.com, the host dashboard at app.guestsboard.com, and the kiosk software running on your Raspberry Pi device. This Privacy Policy explains how we collect, use, disclose, and protect information about you.

1. Information We Collect

Account information: When you register, we collect your name, email address, and password (stored as a secure hash). We never store your password in plain text.

Property content: Information you enter into the dashboard — property name, address, WiFi credentials, house rules, local recommendations, check-in/check-out instructions — is stored to power your kiosk display. This content is displayed to guests on your device.

Device data: Your Raspberry Pi device sends periodic telemetry (CPU usage, memory, disk, temperature, Wi-Fi signal strength) to our API. This data is used to show you device health in the dashboard.

Android and iOS display apps: The app creates a random installation identifier and sends it with a pairing code to GuestsBoard. After you pair a screen in the host dashboard, this identifier is linked to your account and property so the screen can receive its guide. The app stores its pairing identity, private device credential, and downloaded property information in local app storage. Property information can include a guest's first name and stay dates supplied by the host. These display apps do not request camera, microphone, contacts, device location, or advertising access. The initial mobile release does not request live weather.

Usage data: We collect standard web server logs including IP addresses, browser type, pages visited, and timestamps. We use this for security and to understand aggregate usage patterns.

Payment information: Billing is handled by Stripe. We do not store your card number or CVV. We store only a Stripe customer ID and subscription status.

AI chat logs: If you enable the AI Concierge feature, guest questions and AI responses are logged per property. This data is stored in your account and can be deleted at any time.

2. How We Use Your Information

• To provide and improve the GuestsBoard service
• To display your property content on your kiosk device
• To send you service notifications (device offline alerts, billing receipts)
• To respond to support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your data. We do not use your property content or guest data for advertising purposes.

3. Data Sharing

We share data only with service providers necessary to operate the platform:

• Stripe — payment processing
• Resend — transactional email (device alerts, receipts)
• Anthropic — AI Concierge responses (when enabled; guest messages are sent to Claude API)
• OwnerRez (optional) — property and booking sync if you connect your OwnerRez account
• Cloudflare — DNS, CDN, and network security

We may disclose information if required by law, subpoena, or to protect the rights and safety of GuestsBoard or others.

4. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records). Device telemetry is retained for 90 days rolling.

Saved property text in the Android and iOS display apps can remain available during an internet interruption. Guest personalization ends at checkout. Disconnecting a screen in the host dashboard removes its saved property and guest information when the app next connects; an offline screen cannot learn about the disconnect until it reconnects. Clearing Android app data, or deleting the iOS app rather than offloading it, removes that device's local pairing and saved information. To request deletion of information held by GuestsBoard, contact [email protected].

5. Security

We use industry-standard security practices: HTTPS everywhere, bcrypt password hashing, httpOnly session cookies, and encrypted database connections. WiFi passwords stored in your property content are encrypted at rest using AES-256-GCM.

No system is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

6. Cookies

We use an httpOnly session cookie to keep you logged in to the dashboard. This cookie is essential for the service to function. See our Cookie Policy for details.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Opt out of certain processing

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Children's Privacy

GuestsBoard is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance.

10. Contact

Questions about this policy? Email [email protected] or write to:

GuestsBoard
Privacy Requests
[email protected]