Privacy Policy

Guest Concierge is operated by AiKoders LLC (“Guest Concierge”, “we”, “us”, “our”). The service consists of a web dashboard for short-term-rental hosts and a companion mobile application for the staff (cleaners, maintenance, concierge) those hosts work with.

This Privacy Policy explains what personal information we collect through the dashboard and the mobile app, how we use it, with whom we share it, and the rights you have over your data.

2.1 Account information

When you sign up or are paired with a host, we collect:

• First and last name.
• Email address.
• Optional phone number.
• Optional profile picture you choose to upload.
• The category of work you perform (cleaning, maintenance, concierge, security, other).

2.2 Operational data

When you use the app to do your job, we record information related to that work so that the host can review it:

• Which hosts and properties you have access to.
• Work logs you create on a booking — when you started, paused, resumed, completed, plus any notes you entered.
• Checklist items you tick or untick while working on a booking.
• Photos, videos, and voice recordings you upload as evidence of completed work.
• Issues you report from inside the app (description, optional attachments, the booking and listing they are linked to).
• Messages and attachments exchanged in the in-app chat with your host.

2.3 Device permissions and what they are used for

The mobile app may request the following device permissions:

• Microphone — only used to record voice messages you choose to send through the in-app chat. We do not record audio in the background.
• Photos and media — used to let you select images or videos from your gallery to attach to chat messages, work logs, or issue reports, and to set a profile picture. We do not browse or read your library automatically; you pick the files explicitly.
• Location — only when the in-app map is open. Used to show how far each property is from you and to hand you off to your maps app for turn-by-turn directions. We do not track your location in the background.
• Network — required to communicate with our servers.

The app does not request the camera (we select existing media instead), background location, the ability to read your music library, or push-notification access at this time. If we add such features, this Privacy Policy will be updated.

2.4 Information collected automatically

• Basic technical data: device model, operating system version, app version, language, and time zone — used to diagnose issues and prioritize compatibility.
• Authentication tokens issued by our identity provider so that you stay logged in.
• Anonymous usage analytics from the dashboard (page loads, navigation patterns) via Vercel Analytics.

We do not use third-party advertising trackers, and we do not attempt to identify you across other apps or websites.

• To authenticate you and keep your session active.
• To let your host see your work output (checklist progress, evidence photos, time spent, issues reported).
• To enable real-time communication between you and your host through the in-app chat.
• To show properties on a map and compute distance from your current location when you open the map screen.
• To detect and resolve technical issues with the service.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

We share your information only with the parties below, and only as needed to provide the service:

• Your host(s) — every host you are paired with sees your name, contact info, the listings you are assigned to, and the operational data you generate (work logs, evidence, chat messages, reported issues).
• Supabase Inc. — our authentication and database provider. Stores account data, work logs, checklists, and chat metadata.
• Amazon Web Services (S3) — stores the media files you upload (photos, videos, voice recordings, profile pictures).
• Google LLC (Google Maps Platform)— when you open the map screen, the device sends location queries to Google to render tiles and to compute directions. Google's own privacy policy applies to those queries.
• Vercel Inc. — hosts the web dashboard and provides aggregate (non-personal) analytics.
• Authorities — if compelled by valid legal process, we may disclose information to comply with applicable law.

Beyond the parties above, we do not share your data with any third party.

• Account data — kept while your account exists and for up to 30 days after deletion to allow recovery in case of mistake.
• Operational data and chat — kept for as long as the host you generated it for keeps their account active. Hosts may export or remove individual booking records at any time.
• Backups — encrypted backups may persist for up to 35 days after a deletion before being permanently overwritten on rotation.

You can, at any time:

• Access — request a copy of the personal data we hold about you.
• Correct — update your profile information directly in the app, or ask us to fix it for you.
• Delete— delete your account from the app's Profile screen, or write to us at the address below. We respond within 30 days.
• Withdraw consent— revoke a permission you previously granted (microphone, photos, location) from your device's system settings at any time. The features that depended on the permission will stop working until you re-grant it.
• Complain — if you believe your rights have been violated, you may file a complaint with the privacy regulator in your country.

You can request deletion of your Guest Concierge account by:

• Going to the Profile screen of the mobile app and tapping Delete account, or
• Sending an email from the address registered with your account to privacy@aikoders.tech with the subject “Delete my account”.

On deletion we remove your name, email, phone, avatar, and any media you uploaded, and we anonymize the operational records that hosts must retain for legal or accounting reasons.

Guest Concierge is a workplace tool intended for adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has registered an account, please contact us and we will remove the account and associated data promptly.

Our infrastructure is hosted in the United States. If you access the service from another country, your information is transferred to and processed in the United States. By using Guest Concierge you consent to that transfer. Where required by law (e.g. for users in the EU/UK), we use standard contractual clauses with our sub-processors.

We protect your information with industry-standard measures: TLS for data in transit, encryption at rest in Supabase and S3, strict role-based access for our team members, and audit logging on administrative actions. No system is perfect — if you discover a vulnerability, please report it to security@aikoders.tech.

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top and, for material changes, notify you by email or via an in-app banner. Continued use of the service after the change takes effect constitutes acceptance of the updated policy.

For any privacy-related question or request: