Privacy Policy
Last updated: July 23, 2026
This policy explains how pepperAssist ("we," "us") collects, uses, and protects information when you visit this website or use the pepperAssist application and services (together, the "Service").
Information we collect
Account information you provide when signing up (name, email, organization details); property and reservation data synced from your connected Lodgify account; guest conversation data (messages, names, contact details) handled on behalf of, and belonging to, the organization using the Service; and usage data about how you interact with the Service.
How we use information
To provide and improve the Service — including the AI guest assistant, approval workflows, and maintenance dispatch — to communicate with you about your account, and to comply with legal obligations. We do not sell personal data to third parties.
Data isolation between organizations
Each organization using pepperAssist is a separate tenant. Data belonging to one organization — including guest conversations, reservations, and connected-account credentials — is isolated from every other organization on the platform. Lodgify API keys are encrypted at rest.
Third-party services
We rely on third-party providers to operate the Service — for example, authentication, hosting, database, AI, messaging, and channel-manager integration providers. These providers process data only as needed to deliver their part of the Service.
Security posture
We isolate tenant data and encrypt sensitive credentials at rest. We are not currently SOC 2 certified — that is a maturity milestone ahead of us, not something we claim today.
Your choices
You can request access to, correction of, or deletion of your account data by contacting us (see Contact below).
Changes to this policy
We may update this policy as the Service evolves. Material changes will be reflected by updating the date at the top of this page.
Contact
A dedicated contact address isn't set up yet for pepperAssist — reach out via the "Request early access" section on the homepage in the meantime.
Note: this is a standard SaaS-template draft, not a final legal document. It should be reviewed by legal counsel before the Service processes real customer or payment data.