Privacy policy

This policy explains how TATIOSA LLC processes information when people use the TATIOSA Presence service, its public website and optional Google Analytics 4 reporting connection. The Google Analytics Data Privacy Notice provides additional detail.

1. Who operates Presence

TATIOSA Presence ("Presence", "we", "us") is operated by TATIOSA LLC, 58 Mamikonyants Street, Yerevan, Armenia. For privacy requests, contact support@tatiosa.com.

2. Information handled by Presence

• Account and hotel administration: account identifiers, contact details, account roles, hotel details, website settings, published content and administrative activity needed to operate the service.
• Service and technical information: browser and device information, IP addresses, request logs, security events and diagnostics where generated by the service or its hosting infrastructure.
• Billing-related account status: Presence may rely on its connected TATIOSA Pay service for subscription access. Payment processing is governed by the applicable payment provider and service notices; Presence's GA4 reporting connection does not read payment-card credentials.
• Optional Google Analytics integration: when an authorized hotel user chooses Connect Google Account, Presence receives Google authorization credentials and accesses the GA4 properties and reports permitted by that authorization. See our GA4-specific notice.

3. Why we use information

We use information to provide and administer hotel websites, maintain accounts and access controls, manage subscriptions, provide optional reporting and support, diagnose failures, protect the service, and comply with applicable legal obligations. We do not use Google Analytics API data for targeted advertising or to build unrelated marketing profiles.

4. Hotel websites and guests

Hotels using Presence decide what they publish, which third-party integrations to activate, and how they provide guest-facing privacy and cookie information. Depending on the use and applicable law, a hotel may be the controller of its own guest information and its Google Analytics property. The hotel remains responsible for ensuring it has any required legal basis and consent for guest tracking. Presence's read-only Google Analytics reporting authorization is separate from the measurement tag installed on a hotel website.

5. Google user data — access, use, storage and sharing

If a hotel explicitly authorizes Google Analytics reporting, Presence requests only https://www.googleapis.com/auth/analytics.readonly. We use that access to show the hotel's available properties, verify a selected website measurement ID, and retrieve reports such as visitors, sessions, page views, engagement, daily visitors and popular pages.

A Google-issued refresh token is encrypted before storage in Presence's Cloudflare-hosted database. Hotel-specific reports may be temporarily cached on Cloudflare for approximately 15 minutes to improve performance. Google Analytics account data is not used to train AI models, sold, used for advertising, or disclosed to unrelated hotels. Authorized hotel users may see their hotel's reports. Access needed by infrastructure processors is limited to service operation and security. We do not transfer Google user data to advertising networks or unrelated third parties.

Our access and processing of Google data comply with the Google API Services User Data Policy, including its applicable Limited Use requirements.

6. Hosting, security and service providers

Presence uses Cloudflare infrastructure for application hosting, storage, serverless functions and caching, and communicates with Google APIs to retrieve authorized data. HTTPS protects data in transit; GA4 refresh tokens are encrypted at rest by application-level encryption. No internet service can guarantee absolute security. Providers may process service information in multiple jurisdictions consistent with their arrangements and applicable law.

7. Retention, connection removal and revocation

The GA4 reporting connection remains until it is disconnected, expires or access is revoked. Clicking Disconnect reports deletes that hotel's stored connection record, including its encrypted refresh token, from Presence's active database. Report caches are time-limited (typically up to 15 minutes); other operational records may remain where necessary for security, lawful obligations or backups. Disconnecting reporting does not delete any historical data held by Google Analytics, and does not stop website tracking configured separately by the hotel.

To revoke access at the Google account level, visit your Google account's third-party connections. For details see Disconnect and data deletion.

8. Cookies and similar technologies

Presence may use essential authentication and session-related browser storage. Hotel websites may use Google Analytics or other technologies if enabled by their operators. Each hotel should provide its own legally required cookie/consent information; Presence does not guarantee that activating a measurement ID by itself satisfies local consent requirements.

9. Access and deletion requests

For questions, corrections or deletion requests relating to Presence-held personal information, email support@tatiosa.com, identifying the account or hotel concerned. We may verify authorization before taking action. Rights and retention exceptions depend on applicable law and contractual obligations.

10. Changes

We may update this policy when the service or legal requirements change. The effective date will be updated and material changes communicated as appropriate.