MyPorter Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how MyPorterLabs Inc. ("MyPorter," "we," "us," or "our") handles personal information in connection with the MyPorter service ("Service"), an AI concierge that communicates with short-term rental guests over WhatsApp.

This Policy works together with our Terms at https://myporter.ai/terms.

1. The Two Roles We Play

The Service involves two groups of people, and our role differs for each.

  • Hosts. When you sign up for and use the Service as a host, we act as a controller of your personal information. This Policy describes that processing.
  • Guests. When a guest messages the Service, we process that guest's information on behalf of the host as a processor. The host decides what guest data is collected and why, and the host's own privacy notice governs that relationship. Our processing of guest data in this role is governed by our agreement with the host, including a data processing agreement where required by law.

If you are a guest and have questions about how your data is used, contact the host who operates the property. We will support the host in responding.

2. Information We Collect

From hosts:

  • Contact details, including name, WhatsApp number, and email.
  • Property information, policies, instructions, and other content you provide to configure the Service.
  • Billing information. Payments are processed by Stripe. We do not store full payment card numbers.
  • Records of your communications with us and with the Service.

From guests (on behalf of the host):

  • WhatsApp number and any name or profile information WhatsApp makes available.
  • The content of messages exchanged with the Service.
  • Any other information a guest chooses to share in conversation.

Collected automatically:

  • Usage data, log data, timestamps, and technical information needed to operate and secure the Service.

3. How We Use Information

We use personal information to:

  • Provide, operate, and maintain the Service, including generating AI responses to guests.
  • Process payments and manage subscriptions.
  • Communicate with hosts about the Service, including service and billing notices.
  • Improve and secure the Service and prevent fraud and abuse.
  • Comply with legal obligations and enforce our Terms.

4. AI Processing

To generate responses, message content and relevant property information are processed by third-party AI model providers. We use these providers under business terms. Under those terms, your content is not used to train the providers' general-purpose models.

AI responses are generated automatically and may be inaccurate. The limitations of AI outputs are described in our Terms.

5. How We Share Information

We do not sell personal information.

We share personal information with:

  • Service providers and subprocessors who help us run the Service, including Meta Platforms (WhatsApp), Stripe (payments), AI model providers (such as Anthropic and OpenAI), and cloud hosting and infrastructure providers. A current list of subprocessors is available on request at hello@myporter.ai.
  • Hosts, with respect to guest data, as described in Section 1.
  • Legal and safety, where required by law, to enforce our Terms, or to protect the rights, property, or safety of any person.
  • Business transfers, in connection with a merger, acquisition, financing, or sale of assets.

Your use of WhatsApp is also subject to Meta's own privacy practices, which we do not control.

6. International Transfers

We are based in the United States and our providers may process data in other countries. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Retention

We keep personal information for as long as needed to provide the Service and for the purposes described in this Policy, then delete or anonymize it.

  • Host data is retained for the duration of the relationship and for 30 days afterward, unless a longer period is required by law.
  • Guest conversation data is retained according to the host's instructions and our agreement with the host, subject to a default retention period of 30 days.

8. Security

We use reasonable technical and organizational measures to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or port it, and to object to or restrict certain processing.

  • EEA, UK, and Switzerland (GDPR). You have the rights above and the right to complain to a supervisory authority. Where we rely on consent, you may withdraw it at any time. Where we act as processor for a host, we will refer your request to that host.
  • California (CCPA/CPRA). You may request access to and deletion of your personal information and may exercise these rights without discrimination. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any right with respect to data for which we are the controller, contact us at hello@myporter.ai. If your request concerns guest data, contact the relevant host.

10. Children

The Service is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at hello@myporter.ai.

11. Changes to This Policy

We may update this Policy. If we make material changes, we will provide reasonable notice. Changes take effect on the date stated in the updated Policy.

12. Contact

MyPorterLabs Inc. c/o Legalinc Corporate Services Inc. (Registered Agent) 131 Continental Dr, Suite 305 Newark, DE 19713, USA hello@myporter.ai

EU representative under GDPR Article 27: Federico Frappi, c/o Appstyx, Via San Morese 9, Sesto Fiorentino, 50019 (FI), Italy, federico.frappi@myporter.ai