Privacy Policy

Last updated July 7, 2026

This Privacy Policy explains how Experience Hospitality (“we,” “us,” or “our”) collects, uses, and protects information in connection with GuestLens (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

We collect:

• Account information — your email address, password (stored in hashed form by our authentication provider), and the restaurant details you enter during onboarding (name, address, website, connected listings).
• Data you upload — point-of-sale exports and any other operational data you choose to provide, along with feature or enhancement requests you submit.
• Publicly available review data — ratings and review content we retrieve about your business from third-party platforms such as Google, Yelp, OpenTable, and TripAdvisor.
• Billing information — handled by Stripe. We do not store your full card number; we receive limited details such as subscription status and the last four digits.
• Usage and technical data — basic logs and technical information generated when you use the Service (for example, timestamps and error logs) used to operate and secure it.

2. How we use information

We use information to:

• provide, operate, and improve the Service;
• generate scorecards, trends, benchmarks, summaries, and suggested replies;
• process subscriptions and payments;
• respond to your requests and provide support;
• maintain security and prevent misuse; and
• comply with legal obligations.

3. Multi-tenant isolation

GuestLens is multi-tenant, and your data is logically separated from that of other customers using database row-level security. You can see only the data associated with your own account and restaurant.

4. Service providers we share data with

We share information with trusted third parties only as needed to run the Service. These include:

• Supabase — database, authentication, and hosting of your data;
• Vercel — application hosting and delivery;
• Stripe — payment processing;
• Anthropic — AI processing to generate summaries and suggested replies;
• Google and Yelp — retrieval of publicly available review and place data;
• Resend — delivery of transactional and notification emails.

Each provider processes data under its own terms and privacy commitments. We do not sell your personal information.

5. AI processing

Certain features send relevant content (such as review text and data you provide) to our AI provider to generate output. We use providers that process this data to deliver the requested feature. Please avoid uploading sensitive personal information that is not necessary for the Service.

6. Data retention

We retain your data for as long as your account is active and as needed to provide the Service. If you close your account, we will delete or anonymize your data within a reasonable period, except where we are required to retain it for legal, accounting, or security reasons.

7. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and row-level security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at info@experience-hospitality.com. You may also request deletion of your account and associated data.

9. International users

Our providers may process and store data in the United States and other countries. By using the Service, you understand that your information may be transferred to and processed in locations that may have different data-protection laws than your jurisdiction.

10. Children

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example by email or within the Service). The “Last updated” date above reflects the latest revision.

12. Contact

Questions about this Privacy Policy or your data? Contact us at info@experience-hospitality.com.

This document is a starting template provided for convenience and is not legal advice. Please have it reviewed and adapted by a qualified attorney — and aligned with any privacy laws that apply to you (such as GDPR or CCPA) — before relying on it for your business.