Privacy Policy
Guest Premium (“we”, “us”) provides a hotel guest-experience and operations platform. This policy explains what data we process, including optional Google / Gmail access for hotel General Managers.
1. Who we are
Controller: Guest Premium · Website: https://www.guest-pro.com · Contact: omerfarukyilmazrbusiness@gmail.com
2. Data we process
- Hotel staff accounts: name, email, role, authentication data.
- Guest stay & service data: reservations, requests, chat, and operational records needed to run the hotel product.
- Optional Gmail (GM only): if a General Manager connects Gmail, we read limited mailbox metadata for messages addressed to that GM (To/Cc) for the current calendar day — subject, sender, time, short snippet, unread state, and a link to open the message in Gmail. We do not send, delete, or modify mail.
- Optional Microsoft Outlook: same purpose and limits when Outlook is connected.
3. Google / Gmail API use
Gmail access is opt-in per General Manager via Google OAuth. Scope requested:
https://www.googleapis.com/auth/gmail.modify
(read today’s mail and mark messages as read; we do not send or permanently delete),
plus basic OpenID profile scopes to identify the connected mailbox.
- Use: show today’s incoming mail on the GM “Today” / morning focus screen so managers can act quickly.
- Storage: OAuth refresh tokens are encrypted at rest and bound to the GM’s hotel user account. Message content is fetched live for display and is not used for advertising or sold to third parties.
- Revocation: the GM can disconnect Gmail in the product at any time; they may also revoke access in their Google Account permissions.
- We comply with the Google API Services User Data Policy, including Limited Use requirements for Gmail data.
4. Legal bases & purposes
We process data to provide the contracted hotel service, secure accounts, improve reliability, and — only when connected — to surface the GM’s own business email for operational awareness. Hotels remain responsible for their guest and employment notices.
5. Sharing
We do not sell personal data. Processors (hosting, email delivery, AI providers used inside the product) act under contract. Gmail content is not shared with other hotels or unrelated Google users.
6. Retention
Account and hotel operational data are retained while the hotel subscription is active and as required by law. Gmail OAuth tokens are deleted when the GM disconnects. Ephemeral mail list responses are not archived as a second mailbox.
7. Security
Access controls, encrypted token storage, TLS in transit, and hotel-scoped authorization are applied. Only the connecting GM’s account can read that mailbox connection.
8. Your rights
Depending on location, you may request access, correction, deletion, or export of personal data, and withdraw Gmail consent by disconnecting. Contact us at the email above.
9. Changes
We may update this policy; the effective date above will change when we do.