How to request deletion — send an email with the subject “Delete my Inn account.” Signed-in owners can also delete the account from Settings in the app.

What we delete — your account, hotel operational data (rooms, reservations, guests, staff records, work orders, logs), and stored photos tied to that hotel.

What we may keep, and for how long — if you cancel first, we keep hotel data for 90 days so you can restore it, then delete it when you request. Audit logs may be retained for up to one year where required for security. We complete deletion requests within 30 days.

Account info — name, email address, hotel name, and role (owner, manager, front desk, housekeeping, maintenance). Provided when you sign up or are added as staff by an admin.

Authentication credentials — passwords are never stored by us. They are handled by our authentication provider. Staff PINs are stored as a salted SHA‑256 hash.

Operational data you create — rooms, reservations, guest profiles, housekeeping tasks, maintenance work orders, cash counts, store sales, schedule entries, and time‑tracking entries.

Billing data — subscription status, plan, room count, invoice history, and the email used for billing receipts. Card numbers and CVV go directly to our payment processor; we never see or store them.

Location data — when a non‑admin staff member opens the app, the device reports a single coordinate so we can confirm they are at the hotel before allowing them to perform on‑site actions (clock in, mark a room clean). We store the most recent location and the time it was checked, never a movement trail. Admins and users with remote access are exempt and never share location.

Push tokens — if you opt in to notifications, we store the Expo push token for your signed‑in devices so we can deliver schedule and assignment alerts.

Audit logs — every meaningful action (creating a reservation, refunding a payment, changing a role) is recorded for security and accountability.

To run the app and keep your hotel’s data isolated from other hotels.

To process subscription billing.

To enforce hotel policy — geofenced staff access, role‑based permissions, and the audit log.

To send transactional emails and push notifications you have opted into.

To respond to your support requests.

Authentication provider — sign-in, passwords, and user accounts.

Cloud hosting — database, application server, and real‑time sync.

Payment processor — subscriptions, invoices, and the billing portal.

Email delivery — transactional email (receipts, password reset, etc.).

Push delivery — notifications to iOS and Android devices.

AI assistant provider — optional in-app support chat. Conversations are not used to train models.

Access & export — admins can export reservations, guests, and financial reports from the Reports screen at any time.

Correction — admins can edit any record from the relevant screen.

Deletion — email innsince2026@gmail.com from the address on your account and we will fully delete your hotel’s data within 30 days. Signed-in owners can also delete the account from Settings.

Push notifications — toggle off in your device’s system settings or in the app’s notification preferences.

Location — staff who do not want their device location checked can be granted remote‑access by an admin (their on‑site actions will then bypass the geofence). System location permission can be revoked at any time in iOS/Android settings.