Trust & Security at Hotelierly
Hotelierly is built for hotels that require clarity, control, and confidence in how their data is handled. We treat your data with the same rigorous standards as financial systems.
Private by Design
Each hotel operates in a fully isolated workspace. No data is shared between customers, and there is absolutely no cross-hotel access ever.
Intelligence You Control
Your data is never used to train public models. Analysis only references your data at the moment you ask a question, with no persistent learning from customer content.
Secure Infrastructure
Data is encrypted in transit (TLS/HTTPS) and at rest. We host on modern, secure cloud infrastructure to ensure maximum availability and protection.
Access Control
Only users you explicitly invite can access your workspace. Authentication is required for all access, and administrative access is restricted and monitored.
Compliance Principles
Hotelierly is designed with GDPR principles: data minimization, purpose limitation, and the right to deletion.
Data Ownership
You own your data. You can request deletion at any time. Your data is never sold, shared, or monetized.
Hotelierly is designed from the ground up to ensure data isolation, confidentiality, and ownership for every hotel we serve.
Data Ownership
You own your data. Always.
- •All documents and reports uploaded to Hotelierly remain the property of your hotel.
- •Hotelierly does not claim ownership of your data.
- •Upon request or account termination, your data can be permanently deleted.
Data Isolation
Each hotel has a private workspace.
- •Every hotel operates in a fully isolated environment.
- •Data from one hotel is never accessible to another hotel.
- •Analysis only references the data belonging to the active hotel workspace.
- •There is no cross-hotel data sharing under any circumstances.
Analysis & Model Usage
Your data is not used to train public models.
- •Hotelierly uses analysis only at query time to generate answers.
- •Your reports are never used to improve or train general-purpose systems.
- •Responses are generated strictly based on your hotel's own data.
- •This ensures your information remains private and confidential.
Data Storage & Encryption
Hotelierly follows industry best practices for data security:
- •Data is encrypted in transit (HTTPS/TLS).
- •Data is encrypted at rest.
- •Secure cloud infrastructure is used for storage and processing.
Access Controls
Only authorized users can access your data.
- •Access is restricted to users you explicitly invite.
- •Authentication is required for all users.
- •Administrative access is limited and monitored.
GDPR & Privacy Principles
Hotelierly is designed with GDPR principles in mind:
- •Data minimization
- •Purpose limitation
- •Access control
- •Right to deletion
- •Hotelierly processes only the data necessary to provide its services.
Data Retention & Deletion
Your data lifecycle is in your control.
- •Data is retained only while your account is active.
- •You may request deletion of your data at any time.
- •Deleted data is permanently removed from our systems.
Third-Party Services
Hotelierly uses trusted third-party infrastructure providers strictly to deliver the service.
- •No third-party may access your data for advertising or unrelated purposes.
- •All providers are required to meet modern security standards.
Questions & Contact
If you have questions about data security or privacy, please contact:
general@hotelierly.coWe are happy to provide additional information to your IT or compliance teams.
Security Questionnaire
Ready-to-use answers for your IT or compliance team. Click to copy any answer.
Q: Who owns the data?
A: The customer (hotel) retains full ownership of all uploaded data.
Q: Is our data shared with other customers?
A: No. Each hotel operates in a fully isolated environment. There is no cross-customer data access or sharing.
Q: Is our data used to train models?
A: No. Customer data is never used to train public or shared models.
Q: How is data stored?
A: Data is stored securely using encrypted cloud infrastructure, with encryption at rest and in transit.
Q: Who can access our data?
A: Only users explicitly authorized by the hotel can access their data. Internal access is restricted and monitored.
Q: Where is data processed?
A: Data is processed within secure cloud environments operated by trusted infrastructure providers.
Q: Can we delete our data?
A: Yes. Customers may request permanent deletion of their data at any time.
Q: Does Hotelierly comply with GDPR?
A: Hotelierly is designed with GDPR principles in mind, including data minimization, access control, and the right to deletion.
Q: Do we need to provide our own API keys?
A: No. Hotelierly manages all infrastructure internally. Customers never share API keys or credentials.
Q: What happens if we stop using Hotelierly?
A: Your data can be exported or permanently deleted upon request.
Q: Is our data ever sold or shared?
A: No. Hotelierly does not sell, share, or monetize customer data.
Need a formal security document? Contact us at general@hotelierly.co
Frequently Asked Questions
Common questions about our security and privacy practices.
Have more security questions?
Our team is happy to answer any specific compliance or technical questions.
Contact us