Privacy

hoteling is a demo of Kiosk. This page says what it stores and for how long.

What hoteling stores

• Accounts. An account that an AI assistant opens here has no e-mail address and no password. The demo's sample accounts, which you can sign in with, have an e-mail address and a hash of a password.
• Your bookings. The property, the room type, the dates, the total, the confirmation code and the payment status.

What Kiosk stores for an AI assistant

• The assistant's key. An AI assistant that registers gives us its public key. We store it with the account it acts for, the label you give it, its spending cap and when it was linked. We never receive its private key. An assistant that registers on its own gets an account with no e-mail address.
• Link codes. When you link an assistant to your account, we store a hash of the code, never the code. A code expires 15 minutes after we make it.
• Call counts. We count the calls of each assistant account since its last proof of work, and we record the value of each visit you complete. The call toll reads both.
• Events. We keep each event that we send to your assistant, for example a confirmation, for 24 hours. Then we delete it.
• Payments. You enter your card on Stripe's page, and Stripe keeps it. We store your Stripe customer id, the two mandates that your assistant signs for each payment, the amount, the currency, Stripe's payment id, the receipt values and any refund. This demo uses Stripe's test mode: no real money moves.

Server logs

Each request writes a log line with its path, its parameters and the IP address it came from. We remove passwords, e-mail addresses, tokens and keys from the parameters before we write them. The server's system journal keeps these lines until it deletes its oldest lines to stay below its size limit.

We do not sell or share what we store. We set one cookie, the session cookie that keeps you signed in and protects our forms.

How long we keep it

We keep everything above that names no other time until we reset this demo. We reset it by hand, with no fixed schedule, and a reset deletes every account and every row named on this page.