Privacy Policy

This Privacy Policy explains how mtrhost.ai (“mtrhost.ai,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our AI operator for mid-term rentals (the “Service”), including the Hermes agent that drafts and sends guest replies and manages scheduling on your behalf. By connecting your accounts to the Service, you agree to the practices described here.

Information we access

To operate on your behalf, the Service accesses the following categories of data, only with your explicit authorization:

• Google account profile — your name, email address, and basic profile information, used to identify your connected account.
• Gmail data — we request access to your Gmail mailbox in order to read incoming guest and prospect inquiries, draft on-brand replies in your voice, and send the replies you approve. This requires broad Gmail access so the agent can read message threads and send mail from your account.
• Google Calendar data — we request access to your Google Calendar to read availability and create or update events related to bookings, viewings, and guest scheduling.

How we use the information

We use the information we access solely to provide and improve the user-facing features of the Service:

• Detecting and understanding guest and prospect inquiries.
• Drafting reply suggestions and, once you approve them, sending replies from your account.
• Reading availability and managing booking-related calendar events.
• Generating the operational metrics shown in your dashboard (for example, response volume and timing).

We do not use your Gmail or Calendar data for advertising, and we do not sell it.

Limited Use disclosure (Google API Services)

mtrhost.ai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use access to read, compose, send, and manage your Gmail and Calendar data to provide or improve the user-facing features described above.
• We only transfer this data to others as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use this data for serving advertisements.
• We do not allow humans to read this data unless (a) we have your affirmative consent for specific messages, (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and anonymized and used to improve the Service or for internal operations in line with this policy.

How we share information

We do not sell your data. We share it only with service providers that process it on our behalf and under contractual confidentiality and security obligations, strictly to deliver the Service:

• AI model provider — message content is sent to our large-language-model provider solely to generate reply drafts. It is not used to train third-party models.
• Cloud database (Supabase) — message metadata, draft replies, and operational records are stored in our managed database.

Data storage, retention, and security

Data is stored in managed cloud infrastructure with access controls and encryption in transit and at rest. We retain data only as long as needed to provide the Service or as required by law. You may request deletion of your data at any time (see below), and we delete it on request and when you disconnect your account.

Revoking access and deleting your data

You can revoke the Service’s access to your Google account at any time from your Google account connections page. To request deletion of data we hold about you, email us at team@mtrbee.com.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you directly.

Contact

Questions about this policy or your data? Email team@mtrbee.com. See also our Terms of Service.