Guest Data Security

Data remains with the hotel

hotelspot was created for hotel teams, not as a database for reselling contacts. Full ownership of guest data lies with the hotel. The team decides who in the panel and in hotelspot Staff can see orders, requests, and room numbers.

Guests open the Guest App with a QR code or on the Digital Pod and create a hotelspot account. The account links the stay with orders, payments, and requests to the reception. Account data remains with the hotel and is not sent to independent marketing.

Payments and PCI

Card numbers do not pass through the reception or your own payment server. Stripe handles card, BLIK, and Apple/Google Pay. This allows the hotel to comply with PCI DSS without building a gateway and without storing card data in the hotelspot panel.

Funds go to the hotel's account. Reports in G-commerce Manager show amounts per outlet, without disclosing full card data to the team that does not need it to fulfil the order.

AI Concierge and the hotel instance

The agent uses the knowledge base uploaded by the hotel: regulations, menus, price lists, FAQs. Hotel and guest data remain in the hotelspot instance of that property. Conversations with the agent are for managing the stay, not for training a public model for another brand.

When a matter requires a human, the agent provides the reception with a summary with context. Access to requests is available to the hotel team in hotelspot Staff, not to individuals outside the property.

Control on the team’s side

• The hotel decides on the offer, prices, and which outlets are enabled.

• Access to the panel and Staff app is granted to hotel employees.

• PMS integrations (OPERA Cloud, Cloudbeds) synchronise reservations and rooms to avoid manual data duplication.

• Payments and the AI assistant are connected as part of the service, not as a sale of the guest database.

If you need details for a data processing agreement or a list of subprocessors, please write to kontakt@hotelspot.pl. This entry is an overview of the principles visible in the product: data remains with the hotel, cards with Stripe, and the guest account in hotelspot serves to manage the stay, not to build an external contact database.