Privacy policy
Last updated: 2 November 2026
hotelsbot.ai is a service of Gabman Investments Ltd (גבמן השקעות בע״מ), Company No. 513969626, 10 Herzl St, Tel Aviv-Yafo 6688318, Israel. Email: [email protected].
This policy explains what information hotelsbot.ai handles, why, with whom it is shared and what rights you have. In this policy, "we" and "us" mean Gabman Investments Ltd.
1. Our two roles
- Our website, the free demo and our customers' accounts. For this information we decide how it is used.
- Guests of a hotel that uses hotelsbot.ai. When a guest writes or talks to a hotel's agent, the hotel decides how that information is used, and we process it on the hotel's behalf. Guests should also read the hotel's own privacy policy.
2. What we collect
When you use our website and the free demo
- The hotel website address you enter.
- Information we read to build the demo: the hotel's public website, its public business listing on Google (address, phone, opening hours) and public web pages about the hotel.
- The messages you type and the voice you send to the demo agent.
- Technical information such as your IP address, which we use for security checks (Cloudflare Turnstile) and to limit abuse.
- If you leave your details: your name, email, phone number and any note.
When a hotel is our customer
- Contact and billing details of the hotel's team, the hotel information it gives us and the agent's settings.
- Payments are handled by our payment provider, Airwallex. We do not store card numbers.
When guests talk to a hotel's agent (on the hotel's behalf)
- Messages sent through the hotel's website chat, WhatsApp or SMS.
- Phone calls with the voice agent: the voice is processed to understand and answer the guest, and a transcript of the call is created.
- The guest's phone or WhatsApp number, the dates they asked about, booking links we sent and requests passed to the hotel's staff.
3. How we use information
- To build and run the hotel's agent and answer guests.
- To check room availability on the hotel's own booking site and send booking links.
- To pass requests the agent should not handle to the hotel's staff.
- To call a guest back when the guest asks for it.
- To keep the service secure, prevent abuse, provide support and bill customers.
We do not sell personal information, we do not use it for advertising, and we do not use guest conversations to train AI models.
4. Service providers
We use these providers to run the service. They process information for us under their business terms:
- Cloudflare: hosting, data storage, security checks and email delivery.
- OpenAI: generating the agent's text answers and researching public information about a hotel.
- ElevenLabs: voice conversations (speech to text and text to speech).
- Twilio: phone numbers, calls and SMS.
- Meta (WhatsApp): WhatsApp messages.
- Google: public business listing information about a hotel.
- Airwallex: payments.
These providers may process information outside Israel, including in the United States and the European Union.
5. How long we keep information
- Demo agents are deleted after 7 days, or after 30 days if you leave your details.
- Details you leave in the demo are kept for up to 180 days, unless you become a customer.
- Guest conversations are kept so the agent can follow the conversation, and are deleted after 72 hours without new messages, unless the hotel sets a different period.
- Requests passed to the hotel's staff are kept for 30 days.
- Voice call transcripts and audio are stored with our voice provider for quality and support, and are deleted after 30 days.
- Customer and billing records are kept as long as the law requires.
- Security counters are kept for up to 2 days.
6. Cookies and similar technologies
We do not use advertising or tracking cookies. The website chat saves a conversation ID in the browser so a guest can continue the conversation. The security check (Cloudflare Turnstile) may use what it needs to tell people from bots.
7. Your rights
You may ask to see, correct or delete your information, or object to its use, under Israel's Protection of Privacy Law, 5741-1981, and, where it applies, the EU or UK General Data Protection Regulation. Write to [email protected]. We answer within 30 days. If your request is about a conversation with a hotel, you can also contact the hotel, and we will help the hotel answer you. You may also complain to Israel's Privacy Protection Authority or to the data protection authority where you live.
8. Security
Information is sent over encrypted connections (HTTPS), access is limited to people who need it, and service keys are stored separately from the code. No system is completely secure, and we will report serious security incidents as the law requires.
9. Children
hotelsbot.ai is a service for businesses and is not directed to children under 16.
10. Changes
When we change this policy we update the date above. We tell customers about material changes in advance.