Effective October 25, 2026. This addendum forms part of the CoHostBnB service terms between the host (controller/business) and Elite AI Holdings LLC (processor/service provider).
We process guest and staff contact details, reservation details, messages, inspection photos and service records solely to provide the hosting workflows the host configures. The host determines purposes and supplies lawful instructions and notices. Do not upload identity documents or unnecessary sensitive data. We do not sell or share personal data for cross-context advertising, use it for unrelated purposes, or combine it with other customers’ data except as legally permitted to provide the service.
Access is tenant-scoped and limited to authorized personnel under confidentiality duties. Connector credentials are encrypted, private photo access is authenticated, and uploaded photos have EXIF/GPS removed. Hosting, AI, email and the host’s connected PMS/messaging providers process only the data needed for enabled workflows. Contact [email protected] for the current subprocessor list and processing locations. We notify hosts before adding or replacing a subprocessor and allow a reasonable objection; equivalent confidentiality, security and purpose restrictions apply.
Default production windows are 730 days for guest messages and guest PII, 548 days for inspection photos, and 365 days for inbound email data. The operator can shorten or adjust these in retention.yaml. The enabled worker performs a UTC nightly purge; health exposes disabled or overdue purging. A deployment with the worker disabled must not be treated as providing automatic retention.
Tenant administrators can download a ZIP of tenant data and photos using GET /v1/me/export and erase a guest with POST /v1/me/delete-guest, supplying all of that guest’s reservation_ids and associated contact_ids. The host is responsible for identifying all stays and contact profiles. Deletion removes linked message content, evidence files and contact records; retained financial amounts and minimal reservation/suppression identifiers support accounting, prevent re-import and document the deletion. Authentication and connector secrets are excluded from exports. Redacted audit-chain payloads are marked as privacy erasures.
Erasure applies to our active application storage. Provider-held copies and platform messages must also be deleted through those providers. Backups are restricted to disaster recovery; before restored data is made available, the operator must reapply erasures and retention. On termination we return or delete personal data on the host’s instruction, except legally required records, which remain restricted.
We assist the host with access, correction, deletion requests, security assessments and legally required impact assessments. We notify the host without undue delay after confirming a personal-data breach, share available scope and mitigation information, and cooperate with the response. We provide information reasonably needed to verify compliance and permit proportionate audits under confidentiality. We inform the host if an instruction appears unlawful or we cannot meet these obligations, and stop the affected processing until resolved.
The service operates in the United States. Where applicable law requires a transfer safeguard, the parties must put that safeguard in place before the transfer. This addendum does not itself incorporate standard contractual clauses. For privacy instructions, subprocessors or requests: [email protected].
← Elite AI Empire home