Legal
Last updated: [DATE]
This policy explains what personal data TourBoost ("we", "us") collects, why, who we share it with, and the rights you have over it. It applies to two groups of people: property owners who create an account and manage properties on TourBoost, and guests who chat with a property's AI concierge through the guest portal (usually reached by scanning a QR code).
TourBoost is operated by DEEPODO SINGLE MEMBER P.C., [registered address / or "a sole proprietorship based in Greece"], reachable at info@deepodo.com. For the purposes of data protection law, we are the "data controller" for account and platform data, and act as a data processor on behalf of property owners for the guest data their properties collect through the concierge.
If you're a property owner:
If you're a guest using the concierge:
Automatically, for both groups:
Our legal basis for processing owner account data and guest service requests is that it's necessary to perform the service you or the property you're contacting have asked for (performance of a contract). Security and fraud-prevention processing is based on our legitimate interest in keeping the platform safe and reliable.
When you chat with a property's AI concierge, your messages — along with the property's knowledge base content needed to answer you — are sent to OpenAI (our AI provider) to generate a response. OpenAI processes this data on our behalf under its own data processing terms; we do not permit it to be used to train OpenAI's models. The AI's responses are generated automatically and, while we've built safeguards to reduce inaccurate or made-up answers, they can occasionally be wrong. For anything safety-critical, time-sensitive, or important, please confirm directly with your host using the contact details provided in the chat.
We don't sell personal data. We share it only with the service providers that help us run TourBoost ("sub-processors"), each bound by contract to protect it and use it only for the purpose we specify:
Some of these providers may process data outside the European Economic Area (notably OpenAI and Vercel, both US-based). Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses, as required under GDPR. We also share a property owner's guest data (conversations, leads) with that specific property owner only — never with other, unrelated property owners on the platform.
We currently retain account, conversation, and lead data for as long as the associated property or account exists. If a property owner deletes a property, its conversations, leads, and knowledge base are permanently deleted at that time. If you'd like your data deleted sooner — as a guest or as a property owner — contact us at info@deepodo.com and we will handle the request manually, as we don't yet have a fully self-service deletion tool.
The property owner dashboard and admin panel use a strictly necessary session cookie to keep you signed in; it doesn't track you across other sites and isn't used for advertising. The public guest chat doesn't use cookies at all — it uses your browser's temporary session storage solely to remember your conversation if you refresh the page, which is automatically cleared when you close the tab. We don't use any third-party advertising or analytics trackers.
If data protection law (such as GDPR) applies to you, you have the right to: access the personal data we hold about you; correct it if inaccurate; request its deletion; object to or restrict certain processing; request a portable copy of it; and withdraw consent where processing is based on consent. To exercise any of these, email info@deepodo.com. If you're in the EU/EEA and believe we haven't handled your data properly, you also have the right to lodge a complaint with your local data protection authority — in Greece, this is the Hellenic Data Protection Authority.
Passwords are stored using one-way bcrypt hashing, never in plain text. Data is encrypted in transit (HTTPS). Property owners can only ever access their own properties' data — there is no way for one owner to see another's guests, conversations, or leads. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable technical and organizational measures to protect your information.
TourBoost is intended for use by adults booking or managing short-term rental stays. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.
We may update this policy as the product evolves. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify property owners by email.
Questions about this policy or your data? Email us at info@deepodo.com.