Annual Enterprise Consulting LLC ("InnLocker," "we," "us," or "our") operates the
InnLocker platform for hotel package management, accessible at innlockerapp.com
and innlocker.com (collectively, the "Website"), and the InnLocker
software-as-a-service application (the "Service").
This Privacy Policy explains how we collect, use, disclose, and protect information
when you visit our Website, use our Service, or interact with us. It also explains
the rights you may have regarding your personal information.
**If you are a hotel guest whose package information has been entered into
InnLocker by a hotel, your primary point of contact regarding your personal
data is the hotel where you are staying. InnLocker processes that data on the
hotel's behalf as a data processor.**
This Privacy Policy applies to:
When you request a demo, contact us, or create an account, we collect:
When a hotel customer sets up their account, we collect:
When hotel staff log packages through the Service, the system stores:
When you visit our Website, we may collect:
We use cookies and similar technologies as described in Section 6 below.
We receive limited information from:
We may use anonymized, aggregated data that cannot reasonably identify any individual
or hotel for benchmarking, product development, and industry research.
We do not sell, rent, or trade your personal information. We share information only
in the following circumstances:
We share data with third parties that help us operate the Service, under data
processing agreements that restrict their use of your data:
| Provider | Purpose | Website |
|---|---|---|
| Stripe, Inc. | Payment processing | stripe.com |
| Supabase, Inc. | Database and authentication | supabase.com |
| Vercel, Inc. | Application hosting | vercel.com |
| Anthropic, PBC | AI-powered label scanning | anthropic.com |
| Google LLC | Email communication | google.com |
Hotel guest data is made available to the hotel that submitted it, as the data
controller. InnLocker processes such data only on the hotel's instructions.
We may disclose personal information if required to do so by law, court order, or
governmental authority, or if we believe in good faith that such disclosure is
necessary to protect the rights, property, or safety of InnLocker, our customers,
or the public.
If InnLocker is involved in a merger, acquisition, or sale of all or substantially
all of its assets, personal information may be transferred as part of that transaction.
We will notify affected users by email and/or prominent notice on our Website before
any such transfer and before information becomes subject to a materially different
privacy policy.
We may share your information for other purposes with your explicit prior consent.
| Type of Data | Retention Period |
|---|---|
| Hotel customer account data | Duration of subscription + 30 days after termination |
| Hotel guest package records | Duration of subscription + 30 days after termination |
| Audit logs | Duration of subscription + 30 days after termination |
| Website visitor analytics | Up to 12 months |
| Support communications | Up to 3 years |
| Financial/billing records | As required by applicable law (typically 7 years) |
| Marketing contacts (non-customers) | Until opt-out or 2 years of inactivity |
After the applicable retention period, we delete or irreversibly anonymize personal information.
Upon termination of a hotel's subscription, the hotel may request a data export within
30 days of termination, after which all hotel and guest data is permanently deleted.
Our Website uses the following types of cookies and similar technologies:
| Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Required for the Website to function (session management, security) | No — required for operation |
| Analytics | Understanding how visitors use the Website (page views, traffic sources) | Yes |
| Preferences | Remembering your language preference (EN/ES toggle) | Yes |
| Marketing | Measuring demo request conversions and marketing campaign effectiveness | Yes |
You can manage cookies through:
Disabling strictly necessary cookies may impair Website functionality.
Our Website does not currently respond to "Do Not Track" signals from browsers.
We will update this policy if we implement Do Not Track support in the future.
We implement reasonable technical and organizational measures to protect personal
information against unauthorized access, disclosure, alteration, and destruction,
including:
No method of electronic storage or transmission is 100% secure. In the event of
a data breach affecting your personal information, we will notify you as required
by applicable law.
Regardless of where you are located, you may contact us at hello@innlockerapp.com to:
We will respond to all requests within 30 days.
If you are a California resident, you have the following rights under the CCPA/CPRA:
Right to Know. You may request that we disclose the categories and specificpieces of personal information we have collected about you, the categories of
sources, the purposes for collection, and the categories of third parties with
whom we share information.
Right to Delete. You may request deletion of personal information we havecollected from you, subject to certain exceptions.
Right to Correct. You may request correction of inaccurate personal information. Right to Opt Out of Sale or Sharing. InnLocker does not sell or share personalinformation for cross-context behavioral advertising. No opt-out is required.
Right to Limit Sensitive Personal Information. InnLocker does not use sensitivepersonal information for purposes beyond those necessary to provide the Service.
Right to Non-Discrimination. We will not discriminate against you for exercisingyour CCPA rights.
How to Exercise Your Rights: Email hello@innlockerapp.com with subject line"California Privacy Request." We will verify your identity before processing your request.
We do not sell personal information. We do not have actual knowledge of selling
personal information of minors under 16 years of age.
If you are located in the European Economic Area or the United Kingdom, you have
additional rights under the GDPR/UK GDPR:
Legal Basis for Processing. We process your personal data on the following bases:(extendable by 60 days for complex requests).
Supervisory Authority. If you believe we have violated your GDPR rights, you havethe right to lodge a complaint with the supervisory authority in your country of residence.
Data Transfers. If you are in the EEA or UK, your personal data is transferred toand processed in the United States. These transfers are governed by Standard Contractual
Clauses (SCCs) as described in the Data Processing Agreement (Exhibit B to the MSA)
for hotel customers, or, for Website visitors, are covered by InnLocker's reliance on
SCCs with its Sub-processors.
the hotel where you are staying. The hotel is the data controller responsible for
your personal data. InnLocker processes your data only as a data processor on the
hotel's behalf.
To exercise your privacy rights regarding your package data, please contact the hotel
directly. If you contact InnLocker directly, we will forward your request to the
relevant hotel within 5 business days.
The Service is not directed to children under the age of 13 (or under 16 in the EEA).
We do not knowingly collect personal information from children. If you believe we have
inadvertently collected information from a child, please contact us at
hello@innlockerapp.com and we will delete it promptly.
Our Website may contain links to third-party websites (including Stripe, WhatsApp,
and social media platforms). This Privacy Policy does not apply to those websites.
We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time to reflect changes in our
practices, the Service, or applicable law. We will notify you of material changes by:
at least 30 days before the changes take effect.
Your continued use of the Website or Service after the effective date of any update
constitutes your acceptance of the revised Privacy Policy.
For any privacy-related questions, requests, or concerns, please contact:
Annual Enterprise Consulting LLC — PrivacyEmail: hello@innlockerapp.com
WhatsApp: +1 (786) 416-2606
Website: innlockerapp.com
We will respond to all privacy inquiries within 30 days.