Security

One business cannot see another’s chats. Product data lives in the European Union. The AI does not speak if you take the turn away from her. The owner signs in at https://hostly.org.es/app.

Isolation

Every conversation, profile and file carries the business identifier. Inbox and API queries filter by that identifier. In development we test that tenant B cannot read tenant A.

Where the data sits

Database and files in the EU. The chat model is OpenAI (GPT-5.6 Luna); if it does not answer, the same model via OpenRouter and then Gemini (Google). In those cases processing leaves the EU and is documented. The detail for the business is in the data processing agreement.

Human control

You can switch the AI off for the whole place, or only in one thread. The customer’s next message is not answered by the model. The AI does not hand over or change an appointment because someone says a name: it takes the same chat, or a code sent to the email (or the phone) on that booking.

What we do not do

We do not use the WhatsApp name as our brand. We do not mix Hostly with AVA or with Beauty Calendar. We do not store API secrets in the browser.