Privacy
Last updated: July 30, 2026
Guests provides free booking pages for hosts and self-service booking management for guests.
Data we process
Operator accounts include an email address and workspace settings. Listings contain host-provided public content. Bookings contain the guest details requested by the host, booking dates or times, party size, and lifecycle history.
Private management links
Guest management links are bearer credentials. We store only a cryptographic hash of each token. Keep the link private; anyone with it may view or change the booking within the host policy.
Service providers
Vercel serves the application, Convex stores application data and runs backend functions, and Resend delivers authentication and booking email when configured. These providers process only the data needed to operate the service.
Retention and security
Bookings, including cancelled and past bookings, are retained for the workspace lifetime during the MVP. Idempotency records expire after 24 hours and rate-limit buckets after 48 hours. Sensitive pages are excluded from caches and referrer sharing.
Questions and requests
Contact the listing host about a specific booking. For product privacy or security requests, contact us at the address below.