What we collect, and when

• When you sign in with Google: your email address and your name. That is all we ask Google for. No password, no contacts, no files. Google's own sign-in session is closed the moment your workspace opens.
• When you sign in by email link: your email address, and a credential stored on the device you tapped the link on, so that device stays signed in. No password exists anywhere.
• What you type into your workspace: your business name, contact details, products or properties, prices, policies, and the calendar links you paste. It is your business data; we hold it to run your workspace.
• Calendar links (Airbnb, Vrbo, Booking.com): we read each link about every 30 minutes and keep only the busy dates. Guest names and prices inside those feeds are not stored.
• Booking requests on a shop's booking page: the guest's name, email or phone, dates and note, exactly as the guest typed them. They are held for that shop, which confirms or declines, and are never shown to another shop.
• Payments: run by Stripe, on the shop's own Stripe account. Card numbers never touch our servers; we see what Stripe reports back (amount, status, the last four digits).
• The Coquí line (phone, text, WhatsApp, web chat): messages are logged so they can be answered and reviewed. Calls on our lines are recorded and kept for 90 days, then deleted.
• Site analytics: Google Analytics, with pages and clicks only. Our analytics code strips names, emails, sign-in tokens and keys before anything is sent.

What we do not do

• We do not sell your data, or a guest's, to anyone.
• We do not run advertising trackers on these pages.
• We do not message a shop's customers on the shop's behalf unless the shop turns that on, and the page says so when it does.
• We do not hold your money. Stripe moves it from the guest to the shop.

Who else sees it

Only the services that run the software: Google (sign-in and analytics), Google Cloud and Firebase (hosting and the database, in the United States), Stripe (payments), Twilio (phone and text), and Meta (WhatsApp, when a shop uses it). Each one sees only what its job needs.

Your device

We store a sign-in credential and your language preference on your device. That is what keeps you signed in. Signing out removes the credential; so does clearing your browser's site data.

Keeping and deleting

Your workspace data stays as long as your workspace does. Email todoculebra@gmail.com from the address on the account and we delete the workspace and everything in it, including your Google sign-in record. A guest who wants a booking request removed can email the same address or ask the shop. Call recordings go after 90 days on their own.

Children

Our services are for businesses and their adult guests. We do not knowingly collect anything from anyone under 18.

Changes

If this page changes, the date at the top changes with it.