Privacy Notice & Data Processing Addendum

What GlyphSlip stores

A stay is a room number, two dates and a head count. A parking permit holds what your desk types about the vehicle. A device is a random id, its role and a label your staff chose. Billing lives at Stripe: we keep the Stripe customer and subscription ids, never a card number.

What GlyphSlip never stores

No guest name, phone number, e-mail address, photo or ID document. No camera-to-plate reading, ever. No advertising or analytics trackers on any page.

How long

A parking permit keeps only the last four characters of the plate by default. The vehicle's colour, make and plate characters are erased by the daily sweep at least 48 hours after checkout (within about three days).

A stay, its slips, its charges and its breakfast redemptions are deleted 30 days after checkout; only day counters (how many binds, scans and redemptions) remain. The staff audit log is kept 90 days; the record of a property's own settings changes (what changed, when, and from which enrolled device — never a guest's data) is kept while the account is open.

Spent enrollment and recovery codes, old Stripe event ids and stale sign-in guards are deleted by the same daily sweep.

Who processes it (subprocessors)

Cloudflare (hosting and the database) · Stripe (billing, the customer portal and tax) · Resend (the setup and recovery e-mails to your billing address) · Anthropic (only when the optional ENVOY assistant is switched on for your property: a staff member's typed question, a guest's own typed request from an active pass, and the property's posted hours, fees and policies — never a room, a stay, a plate or a password; GlyphSlip stores no message).

Data Processing Addendum (CCPA service provider)

For the personal information in your property's data, we act as your service provider under the California Consumer Privacy Act. We process it only to provide GlyphSlip to you, as these pages describe; we never sell or share it, never use it for advertising, and never combine it with data from another customer. We help you answer a consumer's request about it, keep it secure, require the same of our subprocessors, and delete it when your account closes and the stays it covers have ended.

Contact

Privacy questions and requests: ENVOY, the studio's public desk.