Privacy Policy
Last updated: April 30, 2026
Innkeep is a Chrome extension that helps Airbnb hosts read and reply to guests. It is built around a simple promise: we know who you are, never keep what you write.
The short version
- We store your account info on our server (Firebase). Just enough to identify you.
- Your voice samples, voice profile, settings, and API keys never leave your browser.
- Free plan: conversation text is sent only to the AI provider you pick (Anthropic or OpenAI), using your own API key.
- Premium plan: conversation text is sent to Innkeep's Cloud Function, which forwards it to Anthropic or OpenAI using Innkeep's keys. The Function does not log or store any conversation content.
- If you upgrade to Premium, we use Stripe to process payment. We store your Stripe customer ID and subscription status, never your card details.
- We do not sell, share, or train on any of your data.
What we store on our server
When you sign in with Google, we create a user record on Firebase Firestore that contains:
- Your email address, display name, and Google account ID
- A profile picture URL (the same one Google shows on your account)
- The date you created your Innkeep account and the date you last signed in
- The version of the extension you have installed
- Which AI provider you've selected (Anthropic, OpenAI, or both)
- Subscription tier (free or premium) and, if you've ever subscribed, your Stripe customer ID and subscription status
- Current billing period end date if you're on Premium, so we know when access lapses
That record exists so we can identify you across devices, contact you about important product updates, and manage your Premium subscription if you upgrade.
What stays in your browser
The following data is stored locally on your device using Chrome's storage APIs and is never transmitted to any Innkeep server:
- Your Anthropic and/or OpenAI API key
- The voice samples you save (past replies you've written to guests)
- The voice profile generated from those samples
- Your settings and preferences (default tone, Holding Reply text, auto-analyze toggle)
- Per-thread analysis caches and reply drafts
- Your authentication tokens (signed in with Google + Firebase)
Where conversation data goes
Free plan
When you click Read Conversation or Draft Reply, Innkeep sends the relevant conversation text and reservation details directly from your browser to the AI provider you selected (Anthropic or OpenAI), authenticated by your own API key. Innkeep servers are not in the path. Conversation content does not pass through, and is not stored by, any infrastructure we control.
Premium plan
When you upgrade to Premium, AI calls route through an Innkeep Cloud Function (running on Google Cloud / Firebase) instead of directly from your browser. The Function holds Innkeep's own Anthropic and OpenAI keys, forwards your request to the provider, and returns the response. The Function does not log or persist any conversation content. Errors and runtime metrics are logged (timestamps, latency, error codes) but never the messages themselves.
In both cases, your AI provider's handling of the data they receive is governed by their privacy policy:
Payments (Premium)
If you upgrade to Premium, payment is processed by Stripe. We never see your card number, expiry, or CVV. Stripe handles all of that on their secure infrastructure. We store only:
- Your Stripe customer ID (an opaque token that lets us look up your subscription)
- Your subscription status (active, trialing, past due, canceled)
- The current billing period end date
Stripe's privacy policy: stripe.com/privacy.
What we don't do
- We do not store your conversation text or guest messages on our servers.
- We do not store your AI-generated drafts on our servers.
- We do not store your API keys on our servers.
- We do not sell, share, rent, or otherwise monetize your data.
- We do not use your data to train AI models.
- We do not run analytics on the content of your messages.
- We do not collect data from anyone under 18.
Third-party services
| Service | Purpose | What's shared |
|---|---|---|
| Anthropic / OpenAI | AI analysis and reply drafting | Conversation text + reservation details, when you trigger an AI action |
| Google Firebase Auth | Sign-in | Email, display name, Google account ID |
| Google Firestore | Account record storage | The fields listed above in "What we store on our server" |
| Google Cloud Functions | AI proxy for Premium subscribers | Conversation text passes through, never stored |
| Stripe | Payment processing (Premium only) | Email, name, card details (handled by Stripe directly) |
| Airbnb | The platform Innkeep reads from | Innkeep does not send any data to Airbnb |
Your control
You can:
- Sign out from the Account section in Settings to clear your session.
- Remove your API key any time in Settings.
- Remove your voice samples individually or all at once.
- Uninstall the extension from
chrome://extensions/to remove all locally stored data. - Request deletion of your server-side account by emailing us. We delete within 30 days.
Data retention
Local data is retained until you remove it or uninstall. Your server-side account record is retained as long as the account exists. Email us to request deletion at any time.
International data transfers
Account data is stored on Google's infrastructure in the United States. Conversation data is processed by Anthropic or OpenAI, also primarily in the United States, under their respective international data transfer policies.
For users in the EEA (GDPR)
Legal basis for processing: your consent (you sign in to use Innkeep) and our legitimate interest (basic identification for product operation). Your rights include access, rectification, erasure, restriction, portability, and objection. Contact us using the email below to exercise any of these rights.
For California residents (CCPA)
We do not sell personal information. You have the right to know what we collect (described above) and to request deletion of your server-side data.
Changes to this policy
We may update this policy when the extension's functionality changes or when legal requirements change. The "Last updated" date will reflect the most recent revision.
Contact
Questions about this policy or requests for data deletion: marcus@staylovejoy.com