Privacy policy

Last updated: [DATE]. TEMPLATE: have a lawyer review before publishing.

Who we are

XeniaDesk ([LEGAL ENTITY NAME], VAT [NUMBER], [ADDRESS], Greece) provides AI guest-messaging services to hotels. Contact: info@xeniadesk.com.

Website visitors

When you request a demo we collect your name, hotel, website, email and room count to send the demo and follow up. Legal basis: steps prior to a contract (GDPR Art. 6(1)(b)). We keep this data for up to 24 months unless you become a client or ask us to delete it.

Hotel guests

When a guest messages a hotel that uses XeniaDesk, the hotel is the data controller and XeniaDesk is the processor under a data processing agreement (GDPR Art. 28). Conversations are kept for [12] months and then deleted. Sub-processors: [LIST: AI provider, WhatsApp provider, inbox provider, hosting].

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, and object to processing, by emailing info@xeniadesk.com. You can also complain to the Hellenic Data Protection Authority (dpa.gr).