It is used for one purpose: running your business. Never sold, never shared, and never used to train AI models — ours or anyone else's.
Our AI runs on commercial agreements that contractually prohibit training on customer data. Your data helps run your venue — it teaches nobody’s model. Zero-retention routing is available for clients who require it.
Card details are handled end-to-end by Stripe and Razorpay — certified payment processors. They never pass through FullGuest systems.
Access inside your business is controlled by roles you define. Sensitive actions are logged, and two-factor authentication is available for every account.
All data is encrypted in transit, always. Every connection to FullGuest — from your dashboard to a guest’s phone — is protected.
We run regular security reviews of the platform and act on what they find. Security is treated as ongoing work, not a checkbox.
For organizations with strict data-residency policies, our enterprise tier can run the AI entirely within your own cloud environment — nothing crosses into a shared provider.
Our data practices are designed to align with the privacy frameworks our clients operate under — GDPR (EU), DPDP (India) and PDPA (Singapore): purpose-limited use, consent-based guest data, and deletion on request, backed by a signed data-processing agreement.
We operate to the standards these audits measure, and formal certification is on our roadmap as we grow with our clients. We'd rather tell you that straight than show a badge we don't yet hold.
A signed DPA is available to every client on request — our commitments, in writing.
Security questions — or think you've found something? Tell us: hello@fullguest.com