Privacy Policy
Last updated: 19 October 2026
Who we are
INGENTIQ is an AI visibility service for hotels, resorts and holiday rentals (“INGENTIQ”, “we”). For any question about this policy or your data, email ingentiq@headsonpillows.com.
What this policy covers
This policy covers the website ingentiq.com, the INGENTIQ app, and the emails we send. It explains what personal data we collect, why, who processes it for us, how long we keep it, and your rights.
Data we collect
| Data | Where it comes from | Why we use it |
|---|---|---|
| Early-access requests: first name, work email, company or property, property type and count, website, your message | The form on ingentiq.com | To decide who to invite and to email you about your access |
| Account: name, email, password (stored only as a one-way hash), Google account ID if you sign in with Google | You, when you create an account | To create your account and sign you in securely |
| Team and roles: the workspace you belong to, your role and the properties you can open | Your workspace’s admin | To show each person only the properties they may see |
| Sign-in records: time, IP address, browser type | Your device | Security, preventing misuse, and investigating problems |
| Property information: website, facts, competitors, prompts, Knowledge Base, your questions to Ask INGENTIQ | You and your team | To provide the service |
| Public information about your property: AI answers, public guest reviews, your public website | AI platforms, review sites, your website | To provide the service |
| Billing: plan, payment status, invoices. Card details are handled by Stripe and never reach us | Stripe | To charge for the plan you choose |
| Error reports and bug reports: the page, browser and error details | The app, and reports you send | To fix problems |
Public guest reviews can contain reviewers’ names. We use them only to summarise what guests say about your property, and we do not contact reviewers.
Legal bases
We process personal data to perform our contract with you or your company, for our legitimate interests in running a secure and useful service and in replying to early-access requests, and to meet legal obligations such as keeping invoices. Where the law requires consent, we ask for it.
Who processes data for us
We use these service providers. Each processes data only to provide its service to us.
| Provider | Purpose |
|---|---|
| DigitalOcean | Servers and backups (Singapore) |
| OpenAI and Anthropic | AI that reads answers, reviews and pages, and writes Ask INGENTIQ answers |
| OpenRouter | Backup route to the same AI models when a provider is briefly unavailable |
| Cloro | Asking AI platforms your prompts |
| StayAPI | Collecting public guest reviews |
| Firecrawl and DataForSEO | Reading public web pages and search data about your property |
| Stripe | Payments and invoices |
| Postmark | Sending account and service emails |
| Sign in with Google, if you choose it, and page speed checks of public websites |
Some providers are outside your country. Where the law requires it, transfers are protected by standard contractual clauses or equivalent safeguards.
What we never do
- We do not sell personal data.
- We never show one property’s data to another property’s team. INGENTIQ may learn general patterns across properties, such as the questions AI asks about family travel, without revealing any property’s data.
- We do not use your data to train third-party AI models. We use AI models through their business APIs, which do not use API data to train their models by default.
Sign in with Google
If you choose Sign in with Google, Google shares your name, email address and profile picture with INGENTIQ, and confirms your email is verified. We ask only for these basic details, never for access to your Gmail, Drive, Calendar or any other Google data.
- We use them only to create your account, sign you in and show your name in the app.
- We do not sell them, use them for advertising, or share them with anyone except the service providers above that run INGENTIQ for us.
- We do not use them to train AI models.
- You can remove INGENTIQ’s access at any time in your Google Account under Security → Third-party apps, and ask us to delete your account by email.
INGENTIQ’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep data
- Early-access requests: until you are invited or ask us to delete them, and at most 24 months.
- Accounts and property data: while your company uses INGENTIQ, then deleted within 90 days of the end of the plan, unless the law requires us to keep it.
- Sign-in records: 12 months. Server backups: up to 12 weeks.
- Invoices: as long as tax law requires.
Security
Data is sent over encrypted connections. Passwords are stored only as one-way hashes. Each company’s data is separated by account and role, and every request is checked against what the signed-in person may see.
Your rights
Depending on where you live, you can ask to see, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent. Email ingentiq@headsonpillows.com; we answer within 30 days. You can also complain to your data protection authority.
Cookies
The app uses one cookie to keep you signed in, and a short-lived cookie during Sign in with Google. The website uses no tracking cookies. If we add analytics, we will update this policy and ask for consent where required.
Changes
We will post changes here and update the date above. If a change matters to how we use your data, we will tell account holders by email.