Privacy Policy

EncoreIQ serves two groups. Hosts are the operators who create an account and activate properties. Guests are the people who visit a host's guest site and submit an inquiry. Hosts are the controllers of their own guest records; EncoreIQ processes that data on their behalf.

• Host account data: name, email address and authentication identifiers from email/password or Google sign-in.
• Property data: the listing URL you submit and the property content imported and rewritten from it, including descriptions, amenities, photos, rules and pricing.
• Guest inquiry data: name, email, phone number, requested dates, party size and any message a guest submits through a booking request form.
• Concierge questions: the text of questions asked to the AI concierge on a guest site.
• Usage events: page views on published guest sites, recorded to produce host analytics.

We do not collect payment card numbers. We do not run advertising trackers or sell personal data.

• To authenticate hosts and secure access to their workspace.
• To generate, publish and operate each host's guest experience.
• To deliver booking requests to the correct host and build their guest CRM records.
• To answer guest questions through the AI concierge using that property's own content.
• To produce direct-demand, repeat-guest and fee-recovery reporting for the host.

Imported listing content and guest concierge questions are sent to third-party AI models through Lovable AI to extract structure, rewrite copy and generate answers. Only the content needed for that request is sent. Guest contact details from booking requests are not sent to AI models.

EncoreIQ runs on Lovable Cloud, which provides application hosting, the managed Postgres database, authentication and file storage. AI generation is routed through the Lovable AI gateway to its underlying model providers. Google is used as an optional identity provider when a host chooses to sign in with Google. Listing content is fetched directly from the public URL you submit.

Data is stored in the managed EncoreIQ database with row-level security policies so that a host can only read and write their own properties, booking requests, guest records and analytics events. Published guest sites expose only the property content a host chose to publish — never other hosts' data, and never guest contact records. Traffic is served over HTTPS. Passwords are hashed by the authentication provider and are never visible to us.

Property, guest and analytics records are retained for as long as the host account is active. Hosts can unpublish a property at any time, which removes the public guest site. On request we will delete a host account together with its properties, booking requests and guest records. Guests may ask the host they contacted, or us, to delete their inquiry record.

We use a session cookie and local browser storage strictly to keep hosts signed in. We do not use advertising or cross-site tracking cookies. Guest site analytics record anonymous page-view events and are not tied to an individual visitor's identity.

• Request a copy of the data associated with your account.
• Correct or update your account and property information at any time.
• Delete your account, properties and stored guest records.
• Unsubscribe from any marketing message a host sends through the platform.

Privacy and security questions, including data access and deletion requests, can be sent to privacy@encoreiq.com. Replace this address with your own operating contact before going live.