Privacy policy

Effective August 29, 2026 · Last updated August 29, 2026

This policy describes what Cortesia actually collects and does. If anything is unclear, email us and a person will answer.

Who we are

Cortesia (“we”, “us”) operates cortesia.ai and the Cortesia digital concierge a multilingual AI concierge that hotels offer to their guests. We are based in Texas, United States. Contact: [email protected].

What we collect

If you visit our website

If you submit our demo-request form, we collect what you type: your name, email address, and optionally your hotel’s name, room count, and a message. We also record where the request came from. We do not run analytics or advertising trackers on our site.

If you are a guest at a hotel using Cortesia

You do not create an account. When you use the concierge chat, we collect the messages you type, your room number from the QR code you scanned, the language you are chatting in, timestamps, and the service requests you make. If you book a local experience, we collect the name and email address you enter for that booking.

Allergy and dietary information you share is treated as sensitive and used only to alert hotel staff so they can serve you safely.

If you are hotel staff

We collect your work email address and name, your role and hotel membership, staff records your hotel enters, and task records including assignments and completion times.

Technical basics

Our infrastructure briefly processes IP addresses to limit abusive request rates. These counters are transient and are not stored in our database or used to profile anyone.

How we use information

We use information to run the concierge, answer questions, route service requests, alert staff to allergy disclosures, allow hotel staff to manage their property, respond to demo requests, keep the service reliable, prevent abuse, and improve the product.

The concierge is AI

Guest conversations are answered by an artificial-intelligence assistant, not a person. To generate responses, chat messages and relevant hotel content are processed by our AI model provider, Anthropic. Hotel staff can see guest conversations for their property in their dashboard.

Who we share information with

We share data only with service providers that run the product for a specific purpose:

Anthropic processes chat messages to generate responses.

Clerk provides staff authentication.

Turso provides database hosting.

Vercel provides website and application hosting.

Slack receives requests only when a hotel connects its workspace; demo requests are also posted to our Slack.

ImprovMX forwards email sent to [email protected].

Guest data is shared with the hotel where the guest is staying. If a guest books a local experience, the operator receives the details needed to host the booking. We may also disclose information when required by law.

What we don’t do

We do not sell personal information, use it for advertising, build advertising profiles, or run third-party analytics or tracking pixels. Guest conversations are not used by us to train AI models.

Cookies and similar technologies

We use only functional cookies and browser storage. Our authentication provider sets cookies required for staff sign-in. Staff preferences may be kept in cookies and browser storage. Guest chat stores nothing in your browser; closing the page ends the session.

If we introduce analytics, we will update this policy first.

Data retention and deletion

Today, we retain data until it is deleted on request; automatic retention schedules are not yet enforced. Email [email protected] and we will delete your data.

Children

Cortesia is not directed at children, and we do not knowingly collect children’s data. Guest chat is intended for the registered hotel guest.

Your rights

You can ask us to access, correct, or delete your personal information by emailing [email protected]. We honor these requests for everyone and will never discriminate against you for exercising them.

A note for hotel guests

When Cortesia processes guest data, it does so on behalf of the hotel. The hotel is the controller and Cortesia is its processor. You may direct a privacy request to your hotel, to us, or to both.

Changes to this policy

When we change this policy, we update the dates at the top. Material changes will be noted prominently on this page.

Contact

[email protected] a person reads it.

© 2026 Cortesia