Home› Security & GDPR
Security & GDPR
Guest data stays in Europe, for seven days.
Where guest data is processed, how long it is kept, and who can see it.
MyBrigitteUpdated October 6, 2026
In short
- Hosted in the EU — Frankfurt.
- Kept for 7 days — guest conversations are deleted after a rolling seven-day window.
- No training on customer data — Anthropic Claude, enterprise API.
- Owner knowledge, not guest profiling — Brigitte knows the property; she does not build profiles of guests.
Where the data lives
Brigitte by MyBrigitte is a per-property AI concierge for high-end short-term rentals. Guest conversations are processed and stored in the European Union, in Frankfurt (Vercel Frankfurt region).
How long it is kept
Guest conversations are kept for a rolling seven days and then deleted. Seven days covers a check-out question, a forgotten item or a thank-you message; beyond that, nothing about the guest is retained by the concierge. Storage limitation is the default, not a request. How the 7-day memory window works.
What the AI does with it
Brigitte runs on Anthropic Claude through the enterprise API. Under those terms, customer data is not used to train the model. Each property's concierge answers from that property's own knowledge — the owner's house manual, neighbourhood and recommendations — and nothing is shared between properties.
Frequently asked
Where is guest data hosted?
In the European Union, in Frankfurt (Vercel Frankfurt region).
How long are guest conversations kept?
A rolling 7 days. After that, guest conversations are deleted. The window applies GDPR Article 17 (right to erasure) by default rather than on request.
Does the AI model train on guest conversations?
No. Brigitte runs on Anthropic Claude through the enterprise API, under terms that exclude training on customer data.
What does Brigitte know about a guest?
Only what the guest chooses to say in the conversation, for example a first name. The property knowledge — house manual, neighbourhood, partners — comes from the owner, not from the guest.
What if a guest asks to be forgotten earlier?
A right-to-erasure request is honoured and the guest's conversation is deleted before the seven-day window ends.
Is there a Data Processing Agreement?
Yes. Scope, responsibilities and a Data Processing Agreement are set out in writing with each owner or manager before launch. Ask for it, together with the sub-processor list.
Related reading
Ask for the paperwork.
The Data Processing Agreement and the sub-processor list, on request.