SAT.CY — Solutions, Advice, Trust

Hospitality Review — privacy notice

Updated 13 October 2026.

Who is responsible

Sean Thomas trading as SAT.CY, 2 Ashgrove, Cockermouth, CA13 9RQ, United Kingdom, is responsible for personal information used to operate this service. Email info@sat.cy with questions or requests.

What we collect and why

ChatGPT sign-in provides your account identifier and email. You provide business and billing details, checkout consent, figures, targets, procedure observations, actions and support communications. For digital purchases we also store the licensed property, order identifiers, price, payment and refund status, the agreed terms and request for immediate delivery. We store subscription identifiers and status, AI results and usage counts, and records needed for security and troubleshooting. We use these to deliver your subscription and support (contract), protect accounts and prevent abuse (legitimate interests), and keep required financial records (legal obligations). You must provide the account and billing information needed for a paid service; optional AI use is your choice.

AI analysis and providers

When you request AI analysis after confirming data sharing, selected business figures, calculations, targets, type, location and procedure notes are sent to OpenAI. Account email, business name, action owners and billing data are excluded from the AI payload. Do not put personal information into free text. Results are saved to your workspace. OpenAI API data is not used for model training by default; provider security and abuse monitoring may retain request data under its policies. Our requests set store:false.

We use OpenAI/ChatGPT Sites and its hosting infrastructure, including Cloudflare, for sign-in, hosting and storage; OpenAI for optional AI analysis; and Stripe for payment processing and billing. Providers may process information internationally, including outside the UK and EEA, under their applicable contractual safeguards and privacy terms. We do not promise that all data stays in Cyprus or the UK. Contact us for further information about processing arrangements. We do not sell your information or use your workspace content for advertising.

Access and retention

Workspace records are linked to your signed-in account. Authorised service providers and SAT.CY may access information where needed for support, security or legal obligations. Export and deletion controls are in your account. Deleting the workspace removes its business records and clears saved AI results; minimal usage records remain for quota control and abuse prevention. Cancelling a subscription does not automatically delete your records. We retain account, billing, consent and security records only as necessary for the service, disputes, fraud prevention and statutory record keeping. Ask us to delete your account information; we will explain any records we must retain and the applicable period.

Your rights and complaints

Depending on the circumstances, you can request access, correction, deletion, restriction, portability or object to processing. Where we rely on consent you can withdraw it prospectively; this does not affect earlier lawful processing. Contact info@sat.cy. You may complain to the UK Information Commissioner's Office at ico.org.uk, or your relevant local supervisory authority.

Cookies and browser storage

Sign-in and payment providers use storage needed for authentication, security and payment processing. The application does not add advertising trackers. Earlier browser records may remain in your browser until removed; the import feature lets you move them to your online workspace. Third-party pages have their own cookie and privacy information.