Security
Last updated: October 15, 2026 · Details are in our privacy policy.
Card numbers
Card payments are processed by Stripe, into each hotel’s own Stripe account. LodgingOs never stores full card numbers. We keep only what a folio needs to reconcile: the amount, the status and the last four digits.
ID photos from check-in
Where a hotel turns on ID verification, the guest’s ID and selfie are kept in private storage and shown to staff only through short-lived links. They are kept for the hotel’s retention window, 365 days by default, and then deleted. The details read from the ID can stay on the hotel’s register as part of its records.
Each hotel’s data is separate
Every hotel’s reservations, guests and money are isolated from every other hotel’s, enforced in the database itself, not only in the app. Staff see only the hotel they work at. Payment keys a hotel connects are stored encrypted.
In transit
Every page and app is served over HTTPS only, with HSTS. Data is processed in the United States.
AI
AI features send only the content they need to our AI providers, through their APIs. Those providers do not use data sent through their APIs to train their models, and we do not use guest personal data to train third-party models. We do not sell personal data.
Who processes data (sub-processors)
- Supabase: Database and file storage
- Vercel: Hosting for the websites and apps
- Stripe: Card payments, payouts and card readers
- Twilio: Text messages
- Vapi: The AI phone agent
- Anthropic (Claude), Google (Gemini): AI models for guest chat, reading ID documents and staff summaries
- Channex: Channel management: rates, availability and reservations with the OTAs a hotel connects
Report a security issue
Email support@lodgingos.com with “Security” in the subject. Tell us what you found and how to reproduce it; please don’t access other people’s data or disrupt the service while testing. We reply to every report. Our security.txt has the same contact.
No system is perfect
No system is perfectly secure. We work to protect data and to respond quickly if something goes wrong.