Sell.
Ihr KI-Vertriebsteam – rund um die Uhr für Sie da
Serve.
Betriebs- und Gastgewerbeebene
Scale.
Wachstums- und Marketing-Suite
Und mehr
Mehr als Sie erwarten
Ihr KI-Vertriebsteam – rund um die Uhr für Sie da
Betriebs- und Gastgewerbeebene
Wachstums- und Marketing-Suite
Mehr als Sie erwarten
HotPilot LTD.
Last updated: 28 September 2026
HotPilot LTD. ("HotPilot", "we", "us") engages the third-party service providers listed below ("sub-processors") to process, store, transmit, or analyse personal data on behalf of our Clients in the course of providing the HotPilot platform. This page is referenced by our Privacy Policy and Data Processing Agreement; we keep it up to date as providers are added or removed.
| Provider | Category | Purpose of processing | Website |
|---|---|---|---|
| CHANNEX.IO LTD (United Kingdom, company no. 09250795, trading as Channex) | Channel manager / OTA connectivity | Synchronisation of rates, availability and reservations with online travel agencies, including reservation data containing guest details. Booking.com and Expedia are reached through this provider. | channex.io |
| Klok AD (Clock PMS, Bulgaria) | Property management system | Two-way synchronisation of reservations, guest profiles and folio data with the property’s PMS, where connected by the property. | clock-software.com |
| OnSeason (Calry unified PMS API, Bulgaria) | PMS connectivity (Mews, Oracle OPERA, Cloudbeds, Beds24, Apaleo, Guesty, Hostaway and others) | Synchronisation of reservations (guest name, contact details, stay dates, amounts), room types and availability between the property’s own PMS and HotPilot, where the property connects its PMS through OnSeason. The property’s PMS vendor remains the property’s own processor. | onseason.ai |
| AirGMS Technologies Inc (iGMS, United States) | Property management system (short-term rentals) | Two-way synchronisation of properties, reservations (guest name, contact details, stay dates, amounts) and availability with the property’s iGMS account, where connected by the property. | igms.com |
| Stayntouch Inc. (United States) | Property management system | Two-way synchronisation of room types, reservations (guest name, contact details, stay dates, amounts) and availability with the property’s Stayntouch PMS, where connected by the property. | stayntouch.com |
| The Rocket Science Group LLC d/b/a Mailchimp | Email marketing | Marketing audience synchronisation and campaign delivery, where enabled by the property. | mailchimp.com |
| Klaviyo, Inc. (United States) | Email marketing | Marketing audience synchronisation and campaign delivery, where enabled by the property. | klaviyo.com |
| Sendinblue SAS (Brevo, France) | Email marketing | Marketing audience synchronisation and campaign delivery, where enabled by the property. | brevo.com |
| BORICA AD (Bulgaria) | Payments | Card payment processing, where enabled by the property. | borica.bg |
| myPOS Limited (Ireland) | Payments | Card payment processing, where enabled by the property. | mypos.com |
| UAB “Decentralized” (CoinGate, Lithuania) | Payments | Cryptocurrency payment processing, where enabled by the property. | coingate.com |
| OpenAI Ireland Limited | Speech synthesis | Text-to-speech for the AI concierge voice, where a voice is enabled. | openai.com |
| Eleven Labs Inc. (ElevenLabs) | Speech synthesis | Premium text-to-speech for the AI concierge voice, where a premium voice is enabled. | elevenlabs.io |
| Amazon Web Services EMEA SARL | Cloud infrastructure & AI | Application hosting, databases, file storage, and AI model inference (Amazon Bedrock). | aws.amazon.com |
| Anthropic, PBC (via Amazon Bedrock) | AI models | Large-language-model inference powering the AI concierge and platform AI features. | anthropic.com |
| Postmark (ActiveCampaign, Inc.) | Email delivery | Transactional and guest email sending, including per-property sending domains. | postmarkapp.com |
| Stripe, Inc. | Payments | Guest card payments, where a property has enabled Stripe with its own account. Not used for payments from hotels to us. | stripe.com |
| Revolut Bank UAB | Payments | Guest card payments where a property has enabled them, and separately the platform billing rail for subscription payments from hotels to HotPilot. | revolut.com |
| Paypercut | Payments | Alternative payment processing where enabled by the property. | paypercut.com |
| LINK Mobility Poland sp. z o.o. (SMSAPI) | SMS & messaging | Guest SMS notifications (booking confirmations, payment links, stay messages). | smsapi.com |
| Cloudflare, Inc. | CDN, DNS & TLS | Content delivery, DNS management and TLS certificates for custom property domains. | cloudflare.com |
| Better Stack (Better Stack, Inc.) | Infrastructure monitoring | Application logs and uptime monitoring. Log lines can incidentally contain a guest e-mail address where an error relates to a specific message; retained 3 days. | betterstack.com |
| Atlassian Pty Ltd | Engineering issue tracking | Confirmed support-ticket defects are filed to our engineering tracker: the ticket subject, the reporter’s description and a technical summary with personal identifiers masked before it leaves the platform. Guest records are referenced by identifier only. | atlassian.com |
| Google LLC | Analytics & business tools | Website analytics (Google Tag Manager), Google Business Profile review integration and PageSpeed Insights checks of public website pages. | about.google |
| Meta Platforms Ireland Ltd | Marketing & messaging | Marketing measurement (Meta Pixel / Conversions API) and WhatsApp, Messenger & Instagram guest messaging channels where enabled. | meta.com |
| PostHog, Inc. | Product analytics | Onboarding-wizard telemetry — property identifier, subdomain and setup progress. Hosted in the EU. Carries no guest data. | posthog.com |
| TikTok (TikTok Technology Limited) | Advertising measurement | Advertising pixel and conversions API, enabled by a property on its own site with its own account. Receives page views, IP and device data, and a hashed e-mail address on conversion. The property is the controller for this. | tiktok.com |
| Reddit, Inc. | Advertising measurement | Advertising pixel and conversions API, enabled by a property on its own site with its own account. Receives page views, IP and device data, and a hashed e-mail address on conversion. The property is the controller for this. | reddit.com |
| Snap Inc. | Advertising measurement | Advertising pixel and conversions API, enabled by a property on its own site with its own account. Receives page views, IP and device data, and a hashed e-mail address on conversion. The property is the controller for this. | snapchat.com |
| Pinterest, Inc. | Advertising measurement | Advertising pixel and conversions API, enabled by a property on its own site with its own account. Receives page views, IP and device data, and a hashed e-mail address on conversion. The property is the controller for this. | pinterest.com |
| LinkedIn Ireland Unlimited Company | Advertising measurement | Advertising pixel and conversions API, enabled by a property on its own site with its own account. Receives page views, IP and device data, and a hashed e-mail address on conversion. The property is the controller for this. | linkedin.com |
| Slack Technologies, LLC | Internal operations | Operational alerts and support escalations to the HotPilot team. | slack.com |
| Telegram FZ-LLC | Guest messaging | Optional chatbot messaging channel enabled per property. | telegram.org |
| Viber Media S.à r.l. | Guest messaging | Optional chatbot messaging channel enabled per property. | viber.com |
| Booking.com B.V. | Distribution channel | Channel-manager synchronisation of rates, availability and reservations where connected by the property. | booking.com |
| Expedia Group, Inc. | Distribution channel | Channel-manager synchronisation of rates, availability and reservations where connected by the property. | expediagroup.com |
We may engage new sub-processors or replace existing ones. Material changes are reflected on this page before the new sub-processor begins processing Client personal data. Clients with a DPA in place can object to a new sub-processor as described in their agreement.
Questions about this list? Contact [email protected].