Privacy notice
Two different things happen here, and they have different rules. This page separates them.
Draft, 31 August 2026. Written from what our systems actually do rather than from a template, but not yet reviewed by a solicitor. If you are relying on it for a procurement decision, ask us and we will tell you exactly where the review has got to.
Who we are
GuestAgentics is a trading name of A Fuller Life AI Ltd, a company registered in England & Wales (company number 17164138), registered office 128 City Road, London, EC1V 2NX. A Fuller Life AI Ltd is registered with the Information Commissioner's Office under registration number ZC168678. Contact us about anything on this page at team@afullerlifeai.com.
The distinction that matters
When you visit this site or ask us for an audit, we decide what happens to your data — we are the controller, and this notice governs it.
When the roster works on a property, it handles messages from guests — people who never came to this website and have no relationship with us. For that data the host is the controller and we are only the processor. We act on the host's instructions, under the contract at our data processing terms, and we do not decide what that data is used for.
If you are a guest
You did not give us your data, and that is exactly why this section exists. Your messages and booking details reach us through the booking platform or inbox of the host whose property you booked — never from you directly. UK GDPR requires us to tell you when data arrives that way, and this is that notice.
We handle it only to answer you on the host's behalf. We do not use it for our own marketing, we do not sell it, and it is not used to train AI models. Your rights — access, correction, deletion, objection — are exercised against the host, who is the controller. Ask them first. If it is easier to come to us, email team@afullerlifeai.com and we will pass it on and help them answer.
If you are a visitor or a prospective customer
What we collect
- What you send us. Your name, email address, how many properties you run, the platform you use, and anything you type into the audit form or the chat.
- How you used the site. Pages viewed and rough location, and only if you accept analytics cookies. Decline and no analytics are loaded at all — not loaded-but-ignored.
- Technical data that any web server sees: IP address, browser, and the page you arrived from.
Why, and on what basis
- To answer you and run the audit — necessary to take steps you asked for before entering a contract.
- To keep the site working and secure — our legitimate interest in a service that functions and is not abused.
- Analytics — your consent, given through the cookie banner and withdrawable at any time by clearing this site's data in your browser.
How long
Enquiries: 24 months from your last contact, then deleted. Chat and demo conversations: 30 days. Analytics: as configured in Google Analytics, currently the default retention. Anything we must keep for tax or accounting: 6 years, because the law says so.
The live demo
The Front Desk demo and the chat on this site use invented properties and run on Cloudflare Workers AI — the model runs inside Cloudflare's network, so what you type there is not sent to Anthropic or any other model provider. It is held for the length of the session and is not used to train anyone's model.
This is worth stating precisely, because it differs from the product: when the roster works on a real property, guest message content is sent to Anthropic to generate a reply. That is covered by the data processing terms, not this notice. Either way, please do not put real guest details into the demo — it is a sandbox, not a product instance.
Who else sees your data
We use the suppliers below. We do not sell your data, and we do not share it for anyone else's marketing.
| Who | What they do | What they see | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, edge network, database (D1), key-value and object storage, and the AI model behind the website chat | Website requests, IP addresses, enquiry records, operational records | Global edge; UK/EU data centres for storage |
| Resend (Plain Text, Inc.) | Transactional email — enquiry notifications, owner statements, contractor and renewal emails | Names, email addresses, message content | United States |
| Google LLC | Analytics (only if you accept cookies) and web fonts | Pseudonymous usage data; IP address when a font is loaded | United States |
Some are outside the UK. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on UK adequacy where it exists.
How long we keep it
Enquiry and audit-request data is kept while we follow up, then deleted or anonymised. Customer records last as long as the relationship. Financial records are kept for six years after the end of the accounting period they relate to, because HMRC requires it — that obligation overrides a deletion request for those specific records, and we would tell you so rather than quietly keep them.
Guest data is held for as long as we serve that host, plus the deletion window in their agreement. When a host leaves, it is returned or deleted.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict what we do with it, ask for it in a portable format, and withdraw consent for analytics. Email team@afullerlifeai.com and we will respond within one month.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
Cookies
We set no cookies until you accept them. Decline and nothing is stored except your decision, so we can stop asking. Google Fonts loads from Google's servers, which means Google sees your IP address when a page loads — that happens whatever you choose about cookies, and we mention it because most notices do not.
Changes
If we change this materially we will update the date at the top and, where it affects a customer, tell them directly rather than relying on you re-reading a page.