Concierge← Back to site

Data Processing Addendum

Last updated: July 2026

[REVIEW NEEDED] This is a placeholder DPA. A full DPA should be drafted by a qualified legal advisor and may need to be individually signed with enterprise customers. The Standard Contractual Clauses (SCCs) must be appended if data is transferred outside the EEA.

1. Parties

This Data Processing Addendum ("DPA") supplements the Terms of Service between AI Guest Concierge ("Processor") and the customer ("Controller") who has accepted the Terms of Service.

2. Subject matter

This DPA covers the processing of personal data by AI Guest Concierge on behalf of the Controller in connection with the provision of the AI Concierge platform service.

3. Nature and purpose of processing

  • Storing property data and knowledge base content provided by the Controller.
  • Processing guest messages through AI models to generate responses.
  • Storing guest session data and service requests.
  • Providing analytics on session and message volumes.

4. Types of personal data

  • Property information provided by the Controller.
  • Guest message content.
  • Guest session tokens.

5. Sub-processors

AI Guest Concierge uses the sub-processors listed at /subprocessors. The Controller authorizes the use of these sub-processors as part of the Service.

6. Security

AI Guest Concierge implements the technical and organizational measures described in the Security Policy.

7. Data subject rights

AI Guest Concierge will assist the Controller in responding to data subject rights requests within the timelines required by applicable law.

8. Requesting a signed DPA

Enterprise customers requiring a signed DPA should contact [email protected].