Privacy Policy

1. Who We Are

CueGuest (cueguest.com) is a digital guest guide platform that enables short-term rental hosts to create and share structured property guides with their guests. The platform is operated by Jarred Smith, trading as CueGuest, based in South Africa.

For the purposes of applicable data protection law, CueGuest acts as the data controller for host account data and as a data processor for any guest-facing data that hosts create and manage through the platform.

Contact: jarredpsmith@gmail.com

2. Data We Collect

Host Account Data

• Name and email address (via Google authentication)
• Property information you enter (name, address, check-in instructions, house rules, etc.)
• Guide content including text, images, and URLs you provide
• Billing information processed via Stripe (we do not store card details)
• Usage data including login timestamps, guide views, and feature usage

Guest Data

• Anonymous guide access events (page views, timestamp, device type)
• Email address and marketing preferences — only if the guest explicitly opts in
• No account is required for guests to access a guide

Technical Data

• IP addresses (anonymised where possible)
• Browser type and device information
• Cookies and session data necessary to operate the service

3. How We Use Your Data

We use the data we collect strictly to:

• Provide, maintain, and improve the CueGuest service
• Authenticate host accounts and manage subscriptions
• Process payments via Stripe
• Deliver guest guides via time-limited share links
• Send transactional emails (account confirmations, billing receipts)
• Send marketing emails to guests who have explicitly opted in
• Monitor platform performance and resolve technical issues
• Comply with legal obligations

We do not sell personal data to third parties. We do not use personal data for automated profiling or decisions that produce legal effects.

4. Guest Data and Opt-In Marketing

Guests access CueGuest guides anonymously via a unique link provided by their host. No account creation is required.

Guests may voluntarily opt in to receive special offers, deals, or communications from the host via CueGuest. This opt-in is:

• Entirely voluntary and clearly presented
• Specific in scope — guests are informed of what they are opting into
• Revocable at any time by contacting us at jarredpsmith@gmail.com

Guest opt-in data is stored securely and used only for the stated purpose. It is not shared with third parties beyond the host who operates the guide.

Hosts are responsible for ensuring their use of guest contact data complies with applicable laws including GDPR, POPIA, and CAN-SPAM where relevant.

5. Third-Party Services

CueGuest uses the following third-party services to operate the platform:

• Google Firebase — authentication and identity management
• Cloudflare Workers and D1 — API infrastructure and database
• Vercel — web hosting and deployment
• Stripe — payment processing (PCI-DSS compliant)
• Resend — transactional email delivery

Each third-party provider processes data in accordance with their own privacy policies and applicable data protection agreements.

Third-Party Platform Content

CueGuest may offer features that allow hosts to import or reference publicly available property listing information (such as from Airbnb or Booking.com) to pre-populate their guide. CueGuest is an independent service and is not affiliated with, endorsed by, or sponsored by Airbnb, Booking.com, or any other third-party platform. Hosts are solely responsible for ensuring any content they import or use complies with the terms of service of any relevant third-party platform.

6. Analytics and Tracking

CueGuest uses Vercel Analytics on guest-facing guide pages to understand how guides are accessed and used. This data is aggregated and anonymised where possible.

We use cookies and similar technologies strictly necessary to operate the platform. We do not use advertising cookies or behavioural tracking for advertising purposes.

By accessing a CueGuest guide, guests acknowledge that anonymised access analytics may be collected as described in this policy.

7. Payments and Billing

Payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. CueGuest does not store, handle, or have access to your full card details at any time.

Stripe may collect and process billing information in accordance with Stripe's Privacy Policy.

Billing data (subscription status, invoice history) is retained for as long as your account remains active and for a minimum of 7 years for accounting and tax compliance purposes.

8. Data Retention

• Host account data — retained for the duration of your account and deleted within 90 days of account closure upon request
• Guide content — retained while your account is active; deleted upon account closure
• Guest opt-in data — retained until the guest withdraws consent or the associated host account is closed
• Analytics data — aggregated and retained for up to 24 months
• Billing records — retained for 7 years for legal compliance

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data (subject to legal retention requirements)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — withdraw marketing consent at any time

These rights apply to users in the European Economic Area (GDPR), South Africa (POPIA), California (CCPA), and other jurisdictions with applicable privacy law. To exercise any right, contact us at jarredpsmith@gmail.com.

We will respond to all requests within 30 days.

10. International Data Transfers

CueGuest operates globally. Your data may be processed in countries outside your own, including the United States (via Cloudflare, Vercel, Firebase, and Stripe) and other jurisdictions where our service providers operate.

We take reasonable steps to ensure that any international transfer of personal data is subject to appropriate safeguards, including reliance on service providers who comply with applicable data transfer frameworks.

11. Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure authentication via Firebase
• Time-limited, tokenised guest guide links
• Access controls limiting data access to authorised personnel only

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify affected users as required by applicable law.

12. Contact and Complaints

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority. In South Africa, this is the Information Regulator (justice.gov.za/inforeg).

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated to registered hosts by email. Continued use of the service after changes constitutes acceptance of the updated policy.