COMPLIANCE & SECURITY
Privacy Policy
Last Updated: May 30, 2026
01.Overview & Data Minimization
HotelPlus is a B2B hotel rate intelligence, market pricing analysis, and competitive parity monitoring platform. It works by analyzing publicly available hotel room rates and market distribution data.
Zero Personal Data Footprint: Our platform **does not process, store, or transmit** credit card details, guest booking databases, or guest Personally Identifiable Information (PII). All pricing data is collected from public meta-search and OTA channels.
02.Information We Collect
To operate the B2B SaaS platform, we only process the following limited categories of data:
- B2B Account Metadata: Names, business emails, phone numbers, hotel names, and job titles of registered hotel revenue managers (stored securely via InsForge).
- Public Competitive Data: Competitor public pricing, rate types, room availability, and guest sentiment rating scores fetched via third-party scraping APIs.
- System Logging: IP addresses, browser user agent strings, and click paths logs collected solely to maintain service integrity and prevent scraping abuse.
03.Row-Level Security (RLS) & Tenant Isolation
HotelPlus enforces strict **Row-Level Security (RLS)** policies at the database layer. This ensures tenant-level isolation: no customer can query, view, or modify rate configurations, logs, or credentials belonging to another hotel entity.
04.Data Retention & Deletion
In compliance with our data retention policy, raw scan logging payloads are summarized into trend rollups after **7 days**. All raw log footprints are permanently and irreversibly purged from our storage arrays within **30 days**.
05.User Rights (GDPR & CCPA / CPRA)
B2B users are entitled to standard international privacy rights:
- Right to Rectification: You may correct profile and watch list details in your Settings at any time.
- Right to Erasure (Right to be Forgotten): Upon requesting account closure, we perform a complete, hard deletion of your profile metadata and private watch lists from our database servers.
- Data Portability: You can export competitive price lists and log metrics to CSV/PDF formats at any time.
06.Platform Security Controls
All network traffic is encrypted via TLS 1.3 in transit. For error logging, our platform utilizes automated exception scrubbing algorithms, sanitizing raw database outputs on any 500 error response to prevent system vulnerability exposure.