Privacy Policy
Data controller
The controller of personal data is:
Bouthaina Akid, an individual registered under the Moroccan auto-entrepreneur scheme under number 003891525000001, whose declared business address is Casablanca, Morocco.
Contact for any personal data enquiry: contact@blazeflowstudio.store
LoopGuest processes personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, drawing on international best practices (GDPR).
Data we collect
1. Hotel client data (establishments)
- Account data: first name, last name, business email, password (hashed);
- Establishment data: name, address, contact details, content entered by the establishment (services, menus, events, photos).
2. Guest data (end customers of establishments)
- Stay data: last name, room / unit number, check-in and check-out dates;
- Messages exchanged with the digital concierge (text and, where applicable, uploaded images);
- Service requests and reservations made during the stay.
LoopGuest processes this data on behalf of the hotel establishment, which remains responsible for the relationship with its guests.
3. Prospects and leads
- Website contact and demo forms: name, email, phone, establishment;
- Discovery forms on establishments' public pages ("discovery leads"): name and contact details voluntarily provided.
4. Technical data and cookies
- Guest session cookie (identifying the current stay);
- Language preference cookie;
- Connection and security data (technical logs, rate limiting);
- Where applicable, aggregated audience measurement.
Purposes and lawful bases
| Purpose | Basis |
|---|---|
| Providing the service (guest hub, AI concierge, requests) | Performance of the contract |
| Client account management and billing | Performance of the contract |
| Responding to contact and demo requests | Consent / pre-contractual measures |
| Improving and securing the service | Legitimate interest |
| Transactional emails (notifications, confirmations) | Performance of the contract |
Data is never sold to third parties or used for unsolicited marketing.
Storage and security
Data is stored in Supabase (managed PostgreSQL database), with:
- per-establishment data isolation (Row Level Security);
- encryption in transit (TLS) and at rest;
- strict access control and logging.
Retention periods: guest stay data is kept for the duration required by the service, then archived or deleted according to the establishment's policy; account data is kept for the duration of the contract plus 12 months after termination; leads are kept at most 24 months after the last contact.
Processors and third-party services
| Service | Role | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage | All application data |
| Vercel | Website and application hosting | Technical data |
| Resend | Transactional email delivery | Email address, notification content |
| Anthropic | AI processing of concierge conversations | Messages exchanged with the concierge (sent for reply generation) |
| Google (Places / Maps) | Nearby place recommendations and search | Place search queries (not personally identifying) |
Some of these providers are located outside Morocco (notably in the United States and the European Union). Transfers are governed by these providers' contractual commitments and limited to what is strictly necessary for the service.
Your rights
Under Law No. 09-08, you have the following rights:
- right of access to your data;
- right of rectification;
- right to object on legitimate grounds;
- right to object to direct marketing.
To exercise these rights, contact us at contact@blazeflowstudio.store. We will respond within a reasonable time. You may also lodge a complaint with the CNDP (National Commission for the Protection of Personal Data — cndp.ma).
Guests may also exercise their rights directly with the establishment where they are staying, which is the controller of their stay data.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| Guest session | Recognize the current stay on the guest hub | Duration of the stay |
| Language preference | Remember the chosen language | 12 months |
You can configure your browser to refuse cookies; some features of the service may then be unavailable.
Changes to this policy
This policy may be updated at any time. The date of the latest update appears at the top of the page. Registered users will be informed of any substantial change.