What we collect, and when

• When you sign in with Google: your email address and your name. That is all we ask Google for. No password, no contacts, no files. Google's own sign-in session is closed the moment your workspace opens.
• When you sign in by email link or code: your email address, and a credential stored on the device you signed in on, so that device stays signed in. The 6-digit code is kept only in scrambled form and works for 10 minutes. No password exists anywhere.
• When your business agrees to our terms: the version, the time, the business, the account's email, the device, and a scrambled form of the internet address it came from.
• What you type into your workspace: your business name, contact details, products or properties, prices, policies, and the calendar links you paste. It is your business data; we hold it to run your workspace.
• Calendar links (Airbnb, Vrbo, Booking.com): we read each link about every 30 minutes and keep only the busy dates. Guest names and prices inside those feeds are not stored.
• Booking requests on a shop's booking page: the guest's name, email or phone, dates and note, exactly as the guest typed them. They are held for that shop, which confirms or declines, and are never shown to another shop.
• Payments: run by Stripe, on the shop's own Stripe account. Card numbers never touch our servers; we see what Stripe reports back (amount, status, the last four digits).
• The Coquí line (phone, text, WhatsApp, web chat): messages are logged so they can be answered and reviewed. On a line where recording is on, the greeting says so; recordings are kept 90 days, then deleted. Calls are turned into text so Coquí can answer. When and how a line may text you, and how to stop it, is on our texts, WhatsApp and calls page.
• Site analytics: Google Analytics, with pages and clicks only. Our analytics code strips names, emails, sign-in tokens and keys before anything is sent.

What we do not do

• We do not sell your data, or a guest's, to anyone.
• We do not run advertising trackers on these pages.
• We do not message a shop's customers on the shop's behalf unless the shop turns that on, and the page says so when it does.
• We do not hold your money. Stripe moves it from the guest to the shop.

Who else sees it

Only the companies that run the software, each seeing only what its job needs: Google (sign-in, sending email, analytics, and some AI answers through Gemini), Google Cloud and Firebase (hosting, the database and the backups, in the United States), Anthropic (Claude, which writes Coquí's answers on calls and web chat), Twilio (calls, texts and WhatsApp delivery, and where call recordings are kept), Deepgram and ElevenLabs through Twilio (turning a caller's speech into text, and Coquí's voice), Stripe (payments), and Meta (WhatsApp, when a shop uses it). The full list, and what each one does, is in our Data Processing Agreement.

Your device

We store a sign-in credential and your language preference on your device. That is what keeps you signed in. Signing out removes the credential; so does clearing your browser's site data.

Keeping and deleting

Your workspace data stays as long as your workspace does. Email todoculebra@gmail.com from the address on the account and we delete the workspace and everything in it, including your Google sign-in record. A guest who wants a booking request removed can email the same address or ask the shop. Call recordings go after 90 days on their own. Our nightly backups are encrypted and each is kept 14 days, so a deleted record is gone from them within 14 days too.

Children

Our services are for businesses and their adult guests. We do not knowingly collect anything from anyone under 18.

Changes

If this page changes, the version at the top changes with it. It is one of five documents at islatechpr.com/legal.