Privacy Policy

Booking and Guest Wi-Fi Information

For bookings, we collect contact details, stay dates, guest count, payment method, payment status, and reservation reference. Guest Wi-Fi doesn’t ask for your name, email, or phone number. To run and protect the guest network, we keep a coded device identifier, the device type, and connection times from the network equipment. The network gateway uses a device identifier to authorize access, and we store only a coded (scrambled) version of it. Card, bank, and PayPal credentials are processed by their providers; we do not store full card or bank-account numbers. For a direct booking we may ask you to verify your identity through Stripe Identity. Stripe collects an image of your government ID and a selfie, checks them, and tells us the verification session reference and the result. We do not receive or store the document or selfie images. We also send your name, email address, phone number, and stay dates to Truvi, which screens the reservation and provides damage protection. We store Truvi’s screening reference and result.

How We Use It

To price, hold, confirm, and service reservations; verify guest identity, screen reservations, and arrange damage protection for direct bookings; authorize and support guest Wi-Fi; send stay communications; send email offers only after an eligible direct guest separately requests and confirms them; prevent abuse, double-booking, and fraud; and meet tax and legal obligations. Wi-Fi phone numbers are not used for promotional texts.

Retention

Guest Wi-Fi doesn’t create contact records. Contact records from the earlier Wi-Fi sign-in are deleted automatically within 24 months of the last access request or connection. Confirmed email subscriptions remain until unsubscribe, deletion request, or when no longer reasonably needed to document and honor the communication choice. Booking and payment records may be retained longer for tax, accounting, dispute, fraud-prevention, or legal obligations.

Providers and Tracking

Depending on your choice, payment and confirmation data may be handled by Stripe, PayPal, Zelle through the participating bank, Venmo, or Cash App. Stripe Identity handles identity-document and selfie checks, and Truvi handles guest screening and damage protection, each under its own privacy terms. We also use Google for email and calendar sync, Google Maps Platform for the location and guidebook maps, Cloudflare for hosting and Turnstile bot checks, Tawk.to for optional chat, Google Analytics, PostHog, Meta Pixel, first-party event tracking, email delivery providers, and network equipment providers acting on our behalf. The maps and Turnstile receive your IP address and browser details under their own privacy policies. Analytics tracking does not record guest names, emails, phone numbers, payment details, or message contents. We use PostHog to see how visitors use public pages: which pages they open, what they click, and where they leave. PostHog also records session replays and click heatmaps. Replays hide every form field, the booking form, and the local question box, and PostHog does not run on booking, offer, guest, owner, or Wi-Fi pages. PostHog receives your IP address and browser details under its own privacy policy. The optional Tawk.to chat widget reports the page you are viewing to Tawk.to, and when you use it, Tawk.to and the operator receive the conversation text and any contact details you type. It never loads on its own on booking, offer, guest, or Wi-Fi pages. The standalone Wi-Fi sign-in page does not load advertising analytics, chat widgets, payment scripts, or cross-site trackers.

We use PostHog to see how visitors use public pages: which pages they open, what they click, and where they leave. PostHog also records session replays and click heatmaps. Replays hide every form field, the booking form, and the local question box, and PostHog does not run on booking, offer, guest, owner, or Wi-Fi pages. PostHog receives your IP address and browser details under its own privacy policy.

Your Choices

Request access or deletion, or opt out of marketing, by emailing info@goodreviewsonly.com. We do not sell guest data. The general Website does not respond to legacy Do Not Track signals because there is no uniform standard. If your browser sends the Global Privacy Control signal, we do not load the Meta Pixel. That is the only automatic opt-out signal the Website honors today; Google Analytics, PostHog, and first-party event tracking still run, and you can block them in your browser.

12. AI Assistants and Agent API

AI assistants can use our public agent API and MCP server to read property facts, check dates, and get a quote or a website booking link. These tools take stay dates, a guest count, and a pet count. The booking link can also carry an optional guest name and email in the URL so the form can prefill them. The quote does not store that name or email. The tools do not take a phone, payment, or identity document.

We log each agent API request so we can see whether it succeeded, which route answered, and how long it took. Each request writes one log line with an event name, a server-generated request id, the route, the hostname, the status code, the elapsed time, and a claimed client. The claimed client is recorded only when the X-Agent-Client header is grok, muse, openclaw, or hermes. Any other value is stored as unknown. The line does not include stay dates, a raw IP address, or payment details. Cloudflare, which hosts the site, keeps those Workers Logs for up to 7 days.

When the site prices a stay, it sends PriceLabs the listing and the check-in and check-out dates so PriceLabs can return nightly rates. PriceLabs does not receive the guest count, a name, an email, or a phone number. We store the guest count and pet count on our quote, with the dates and the price snapshot. The snapshot has no guest name, email, phone, or payment credential. A scheduled job deletes stored quotes 24 hours after they are created. That job runs every 30 minutes. Rate limits store a hashed key, not a raw IP address, and rows older than 7 days are deleted when a request budget is used.

Questions about this data: info@goodreviewsonly.com.