Privacy policy

1. About this policy

Maskd AI (“we”, “us” or “our”) operates maskdai.com. This policy explains how we handle personal information through this website, its personalized hotel demos and audit scheduling. It does not replace a hotel’s own privacy policy or the terms and privacy notices that apply to separately contracted services.

2. Information we collect

• Hotel website information. When you enter a hotel URL, we retrieve public pages and extract information such as the hotel’s name, amenities, policies and publicly available contact details to build your demo.
• Demo conversations. We process the messages you enter, recent conversation history and AI responses. For voice demos, our voice providers process your audio, transcription and call metadata to run the conversation. Voice providers may retain transcripts or recordings according to their service settings and policies.
• Contact and booking details. If you request a phone demo, we collect your name, hotel, work email, phone number and confirmation that you agree to the requested call. When you book an audit, the scheduling service collects the details you submit, including your contact details and chosen appointment.
• Technical information. Our hosting and service providers process information such as your IP address, browser, device, request timestamps and diagnostic logs. The demo also uses a hashed form of your network address and usage counts to limit abuse.

Please use example guest details when trying the demo. Avoid entering payment-card details, passwords, health information or other sensitive personal information.

3. How we use information

We use information to personalize and operate the demo, generate replies, connect requested calls, arrange audits, respond to inquiries, maintain the website and prevent misuse. We also use information when necessary to comply with legal obligations or resolve disputes.

Where applicable data-protection law requires a legal basis, we rely on steps you request before entering a business relationship, our legitimate interests in operating and securing our services, legal obligations, or your consent where required. You can withdraw consent for future consent-based processing by contacting us; this does not affect processing already carried out.

4. Service providers and other disclosures

Information needed to deliver these features is processed by service providers. The current demo uses Vercel for hosting, Supabase for database services, OpenAI for AI processing, Vapi for voice calls, Deepgram for transcription, ElevenLabs for the Nola voice, and Cal.com for audit scheduling. Voice and telephone services may involve additional telecommunications providers.

These providers may process information in countries other than your own. Their privacy notices describe their handling of information, including storage and international processing: Vercel, Supabase, OpenAI, Vapi, Deepgram, ElevenLabs and Cal.com.

We may also disclose information when required by law, to protect rights and security, to professional advisers, or as part of a business transfer subject to applicable protections.

5. Cookies and browser storage

The landing page keeps the current demo conversation in page memory. It does not currently load advertising-tracking scripts. Hosting services and embedded scheduling or voice features may use cookies or browser storage for functionality, security and session management. The audit calendar loads when you open it.

You can control cookies through your browser settings, clear stored website data and decline microphone access. Blocking required storage or permissions may prevent some embedded features from working.

6. Retention and security

We keep information for as long as needed for the purpose for which it was collected, including providing the demo, following up on your request, preventing abuse, meeting legal obligations and resolving disputes. Retention depends on the type of information, its purpose, applicable legal requirements and service-provider settings. A demo session expiring does not necessarily delete its database record or provider logs.

We use technical and organizational safeguards, including access controls and encrypted connections, to protect information. No internet service or method of storage can guarantee absolute security.

7. Your choices and privacy rights

You can choose whether to submit a hotel URL, use a voice demo, provide contact details or book an audit. You can stop a browser call using the end-call control and close the page to end your interaction.

Depending on where you live and the law that applies, you may have rights to request access to, correction of, deletion of or a copy of your personal information, to restrict or object to certain processing, or to withdraw consent. Contact us to make a request. We may need to verify your identity, and some information may need to be retained for legal or security reasons. You may also have the right to complain to your local data-protection authority.

8. Children and third-party websites

This website is intended for business users and is not directed to children under 18. If you believe a child has provided personal information, contact us so we can investigate. Links to hotel websites or other services lead to sites with their own privacy practices.

9. Changes to this policy

We may update this policy as our services or practices change. We will publish the revised policy here and update the date above. Where required by law, we will provide additional notice of material changes.