4hotels

Privacy Policy

Last updated: October 31, 2026

Who we are

4Hotels (operated by Elevenx2 LLC) is a marketing and guest-retention tool for small hotels and motels. Contact: support@4hotels.com.

What we collect

From property owners and staff: your email address (to sign you in), property details you provide (name, offers, local facts), your mobile number if you sign in or verify by text, and photos you send to your 4Hotels number or upload. Card payments are handled by Square; we never see or store your full card number.

From hotel guests: only what a guest submits on a property's sign-up page or at check-in — typically an email address, first name, and sometimes a phone number — together with their consent to receive marketing email from that property.

Automatically: basic usage events (for example, that a sign-up page was visited) so properties can see how their marketing performs. We measure visits to our public pages with our own analytics (see Cookies and visit measurement). We do not run third-party ad trackers.

From phone calls: when someone calls a 4Hotels phone number, we keep the caller's number, the time and length of the call, a written transcript, and the details the caller gives (such as a name and callback number). The audio of these calls is not recorded.

Link tracking and one cookie: links in a property's posts, emails and newsletter end in a short code (for example ?h=ab12cd34). When a guest opens one, we record the visit on our own servers and set a single first-party cookie, hb_v, a random ID, in that guest's browser for 30 days. If the same guest then asks about a stay or books direct within 30 days, the property sees which post or email led to it, so it can tell which marketing pays. The cookie holds no name or contact details, is only set when a guest arrives through a tracked link, is not shared with anyone else, and is not used for ads or to follow guests to other sites. Clearing your browser's cookies removes it.

How we use it

To draft and send marketing on a property's behalf (social posts for their approval, and emails to guests who agreed to receive them), to analyze photos so drafts match them, and to show properties their results. Guest lists belong to the property that collected them. The account owner confirms they have a relationship with, and permission to email, the guests they upload or add; we keep that confirmation with its date as the record of permission. We never sell personal information, and we never email guests who have unsubscribed, reported spam or whose address does not work.

Social account connections

If a property connects a social account (such as a Facebook Page, Instagram professional account, Google Business Profile, or YouTube channel), we store the access credentials those platforms issue and use them for one purpose: publishing content the property has explicitly approved, to the accounts they chose. We do not read private messages, friends lists, or anything beyond what publishing requires. Disconnecting an account in 4Hotels revokes our access.

Your Gmail, Outlook and calendar

If you connect your Gmail or Google Calendar, 4Hotels uses your Google email address to show which account is connected and to put it in the From line of emails you choose to send from it, uses Gmail's send permission only to send the emails you write and choose to send from it, and uses Calendar's event permission only to add events you ask for. We do not read your email or calendar. Your Google tokens are stored encrypted and used only for these actions. We do not share Google user data with anyone else, use it for advertising, or use it to train AI models. 4Hotels's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Outlook and Microsoft calendars are handled the same way. You can disconnect at any time in Connect other apps, which also asks Google to remove the permission, or at myaccount.google.com/permissions.

Phone calls

4Hotels phone numbers are answered by an AI assistant, and it says so at the start of every call. These calls are not recorded as audio, but a written transcript is kept for the property. If you do not want to talk to an AI, hang up when you hear the greeting.

Text messages

We text a person only if they texted a 4Hotels number first, or ticked an unticked text box themselves, or asked for an account sign-in or verification code.Consent is never a condition of buying anything. Reply STOP to any text to stop, or HELP for help; we keep a record of each opt-in (the time, the wording shown and the page version). Message and data rates may apply. Phone numbers and opt-in records are not sold or shared for anyone's marketing. Full terms: text messaging terms.

AI

The drafts, pictures, videos and voices in 4Hotels are made with AI, and a property approves what goes out. AI phone assistants tell callers they are an AI. Text, photos and audio are sent to our AI providers only to do the task asked for. We do not sell this data.

Cookies and visit measurement

We use a sign-in cookie that keeps you signed in (needed for the app to work), and the one link-tracking cookie described above. To count visits and see which pages work, our public pages run our own analytics on our own servers. It reads basic details of the browser and device (such as screen size and language) to tell visits apart without a cookie, and it stores a random visit ID in your browser's local storage. On a sample of visits to public pages it may record anonymous screen activity, with everything typed into a form hidden; it does not record the signed-in app. It is not used for ads and is not shared with any ad network.

Checking email addresses

The email addresses of guests that you upload or add are checked by a third-party email verification service before we send anything to them. The check only confirms that an address can receive mail. We do not sell your contacts, and we do not use them for anything else.

Who processes data for us

We use trusted service providers to run 4Hotels: Vercel (hosting), Supabase (database and sign-in), Square (payments), Amazon SES and Resend (email delivery), Telnyx (text messaging and phone calls), Bouncer and ZeroBounce (email address verification), and AI providers that draft text, describe photos, make voices and render video (Anthropic, OpenAI, Google, ElevenLabs, HeyGen and RunPod). Each receives only what it needs to do its job.

Your choices

Guests: every marketing email includes a one-tap unsubscribe that works immediately.

Everyone: you can ask us what we hold about you, ask us to correct it, or ask us to delete it (see below). California residents have these rights under the CCPA; we honor them for everyone.

Delete your data

Email support@4hotels.comwith the subject “Delete my data” from the address you want removed, and we will delete your personal information, including any call recordings and transcripts tied to you, within 30 days and confirm by reply. If you connected a social account, you can also remove 4Hotelsfrom that platform's app settings at any time, which revokes our access immediately.

Security & retention

Data is encrypted in transit, access is restricted to the property it belongs to, and we keep personal information only as long as an account or guest relationship is active (or as the law requires). Questions? Email us — a person reads it.