Privacy notice

Who is responsible

Vibesapps ("we", "us") runs hanas.ai and is the data controller for the information described here. Contact: mustafa@vibesapps.co.

This page covers the live demo call with the fictional Hotel Hanas and the early-access form on hanasai.vibesapps.co.

What we collect and why

Demo call. If you start a call, your voice is sent to our AI receptionist and the call is recorded. We keep the recording and a transcript, the call length, the language, and any booking request or callback details you give during the call (for example a name and phone number). Please do not share real personal details: Hotel Hanas is fictional, and a made-up name and number are enough. Purpose: to run the demo, to show how the product works, and to improve it. Legal basis: your consent (you start the call after reading the notice and allowing the microphone).

Early-access form. Name, hotel name, hotel website, email address, number of rooms (optional) and the time you agreed to be contacted. Purpose: to contact you about early access. Legal basis: your consent.

Abuse protection. To stop automated misuse we run Cloudflare Turnstile and count requests per network address. We do not store your IP address in the clear: we keep a salted one-way hash, and for the form also your browser's user-agent text. Legal basis: our legitimate interest in keeping the service secure.

We do not use advertising or analytics cookies. Cloudflare Turnstile may use your browser's storage to run its check.

Who processes your data

Supabase hosts our database in Ireland (EU). It holds call transcripts, booking requests and form submissions.

ElevenLabs provides the voice and speech service for the call. ElevenLabs' standard data hosting is in the United States, so call audio and transcripts may be stored and processed there.

Cloudflare serves this website, runs Turnstile and runs our application code.

These providers act on our instructions. Because some of them are outside the EU, EEA and Türkiye, your data may be transferred internationally.

How long we keep it

Call recordings and transcripts at ElevenLabs: 30 days.

Call transcripts and booking or callback details in our database: 90 days, after which the transcript is deleted and personal details are removed. Call length, language and outcome are kept as anonymous statistics.

Early-access form details: up to 365 days, or until you ask us to delete them.

Abuse-protection counters: 7 days.

Your rights

Under the GDPR and Turkey's Personal Data Protection Law (KVKK, Law No. 6698, Article 11) you can ask whether we process your data, ask for a copy, ask us to correct or delete it, object to processing, and withdraw your consent at any time. Withdrawing does not affect what we did before. Write to mustafa@vibesapps.co. If you are not satisfied, you can complain to your data protection authority (in Türkiye, the KVK Kurumu).

Because we keep only a one-way hash of your network address, we may ask for details such as the approximate time of your call to find a recording.

Children

This service is for hotel professionals and is not meant for children.

Changes

We may update this notice. The date at the top shows the latest version. Last updated: 4 November 2026.