Privacy Policy.

This policy applies to hosts who create an account with Bonsori Concierge, guests who use a Bonsori guest link or QR page, and anyone who contacts Bonsori directly.

Bonsori Concierge is operated by Bonsori. You can contact us at operations@bonsori.com for privacy, support, billing, compliance or security questions.

For guest stay information and ID documents, the host usually decides why the information is needed and how long it is needed for. Bonsori provides the software used to collect, store, display and manage it.

Host account information: email address, authentication details, subscription status, billing identifiers, settings, support messages and Terms or Privacy Policy acceptance records where recorded.

Property information: property name, address or location, check-in notes, Wi-Fi details, house rules, parking information, appliance instructions, local recommendations, emergency contacts, taxi or transport information, FAQs, documents and host notification details.

Guest stay information: guest name, email address, stay dates, booking references, guest count, temporary stay PIN, access status, approval status, guest messages, requested services, escalation records, conversation timestamps, page usage and basic device or browser information needed to run the service.

Booking Guard information: when a host chooses to forward booking-only notifications, Bonsori extracts structured reservation details such as booking channel, property or listing name, guest name, stay dates, guest count, booking reference, booking time, amendment or cancellation status, and price or payout where the notification includes it. The raw forwarded email body is discarded after processing and is not retained as an inbox archive.

Check-in documents: where a host or property requires identity or registration documents for legal, building, insurance, local registration or check-in compliance, guests may upload document files and related details such as name on document, document type and issuing country.

Billing information: subscription tier, trial status, Stripe customer and subscription identifiers, payment status and billing events. Raw card numbers are processed by Stripe and are not stored by Bonsori.

To provide the service: create guest guide pages, collect guest check-in details where a host asks for them, store required check-in documents for host review, answer guest questions, show local recommendations, generate QR and guest links, notify hosts, manage service requests and display analytics.

To control access: verify StayLink sessions, generate temporary stay PINs, unlock or block concierge access, move checked-out stays to previous stays and support host approval or rejection decisions.

To improve the host guide: identify missing answers, show knowledge gaps, suggest improvements, and help hosts keep property information useful and current.

To operate Booking Guard: place recognised reservations on the correct property calendar, reconcile optional calendar feeds, detect possible overlaps, surface uncertain property matches for host review and notify the host when attention may be needed. Bonsori does not automatically cancel, refund or alter a reservation.

To operate the business: manage accounts, subscriptions, trials, support, security, legal obligations and product performance.

Where privacy law requires a legal basis, Bonsori may rely on contract where processing is needed to provide the service to hosts, legitimate interests where processing helps operate, secure and improve Bonsori, consent where a person chooses to provide optional details, and legal obligation where records are needed for tax, accounting or compliance.

For guest ID documents, the host is responsible for having and explaining the lawful reason for requesting the document. That may include local registration rules, building rules, insurance requirements, fraud prevention or check-in compliance depending on the host and property.

Guests should only provide contact details or check-in documents if they want the host to use those details for the stay, or where the host has explained that they are needed for legal, building, insurance, local registration or check-in compliance.

Bonsori uses Supabase for authentication, database storage and private file storage, Stripe for billing, SendGrid for email notifications, and optional services such as Twilio, OpenAI and Google Places when those features are configured.

Guest questions and property context may be sent to AI or local search providers so Bonsori can generate answers, local cards, links and escalation decisions. Hosts should avoid adding unnecessary sensitive personal data to property guides.

These providers process information only as needed to deliver the Bonsori service, support billing, send notifications or provide configured product features.

Bonsori stores information using trusted cloud providers. Those providers may process or store data in countries outside the UK or European Economic Area depending on their infrastructure and service settings.

Private booking-forwarding addresses are unique to the host connection. Optional calendar-feed URLs are encrypted at rest and are used only to retrieve reservation availability from the provider selected by the host.

Where international transfers apply, Bonsori expects its providers to use appropriate contractual, technical or organisational safeguards.

Bonsori may use cookies or similar technologies to keep hosts signed in, protect sessions, understand product usage and operate the website.

Analytics are used to understand how the product is performing and which guest questions or host workflows need improvement.

Hosts can edit or delete property guide content from the dashboard. Guest conversations, check-in details and uploaded check-in documents are kept so hosts can manage the stay, meet explained compliance needs and resolve issues.

Booking Guard retains the structured reservation record and a limited processing receipt needed for deduplication, security and troubleshooting. It does not retain the raw forwarded email content. Disconnecting forwarding stops new email imports; hosts should also remove the forwarding rule from their email provider.

After checkout, Bonsori is designed to end guest concierge access and move the record into previous stays. Hosts may permanently delete previous-stay records where the dashboard provides that control.

We keep information for as long as needed to provide the service, meet legal or billing obligations, prevent misuse, resolve disputes, maintain backups and improve the product. If an account is closed, some records may be retained where necessary for lawful business, accounting, security or compliance reasons.

Hosts should only keep guest ID documents for as long as they need them for the purpose explained to the guest.

Hosts can update most property and account information in the dashboard. Guests can choose whether to provide optional contact details when using the concierge, and should upload check-in documents only where the host has asked for them for this stay.

You may contact operations@bonsori.com to ask about access, correction, deletion or other privacy rights that may apply to you. We may need to verify your identity or account before acting on a request.

Bonsori uses account-based access, protected dashboard routes, signed StayLink access, private storage, row-level security, rate limiting and provider-managed infrastructure to help keep host and guest information secure.

No internet service can be guaranteed completely secure. Hosts should only add information they are comfortable making available to guests through the guest concierge page, and should avoid unnecessary sensitive personal data.

Bonsori may update this Privacy Policy as the product develops, laws change or new features are added. The latest version will be available on this page.