Short, because we hold almost nothing

Ostler is a product of Greulich Labs LLC, which is responsible for the little we hold — described below. Questions go to support@getostler.com.

Reservations, guests, payments, notes — all of it lives in a database file on your computer. It is never sent to us, and we have no way to read it. Backups go only where you point them. Emails to guests go through your own email provider or Resend account, and that provider’s privacy terms apply between you and them — Ostler is not in the path.

If you choose “Sign in with Google” for email, Ostler asks Google for permission to send email on your behalf (the Gmail “send” scope), plus the basic sign-in scopes that tell it which account you chose — your email address, shown in Settings so you can see what is connected. Ostler uses the send permission for exactly one thing — sending your hotel’s own guest emails (confirmations, receipts, reminders, and messages you write) from your own Gmail or Google Workspace address. Ostler never reads, lists, searches, or stores your mail, and no message content or Google data is ever sent to us. The sign-in token stays in your computer’s keychain; “Disconnect” in Settings deletes it, and you can revoke Ostler’s access at any time from your Google Account’s security page.

Ostler’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

“Sign in with Microsoft” works the same way: Ostler asks for permission to send mail as you and to see which account you signed in with, uses it only to send your hotel’s own guest emails from your Outlook or Microsoft 365 address, and never reads your mail. The token stays in your computer’s keychain; “Disconnect” in Settings deletes it, and you can revoke Ostler from your Microsoft account at any time.

When you buy a license: the email address you used at checkout and your payment record, held by Stripe, our payment processor — we never see card numbers. We use that record for exactly two things: emailing your license key (including re-sends you request) and support — which includes confirming it is you before we issue a rescue code for a lost password. We don’t send marketing email, and we don’t sell or share anything with anyone.

If you write to us — through the contact form or straight to support@getostler.com — we hold your name, your email address and what you wrote, for as long as it takes to answer you and to make sense of it if you write again. The form sends that message to our inbox and does nothing else with it.

It’s static pages. No analytics scripts, no advertising trackers, no cookies — which is also why there is no cookie banner asking you to agree to any. Nothing here is stored on your device, so there is nothing to switch off. If you buy, Stripe’s checkout page operates under Stripe’s own terms.

Ostler Desktop makes two connections to us and no others. It confirms your license at activation and every six hours after, sending your license key, a random install id and the app’s version number — never any reservation or guest data — and keeps working for up to 48 hours if that check can’t get through. And it checks our website for updates each time it opens (or when you press Check now); the app works identically if that check never succeeds.

Write to support@getostler.com to ask what we hold about you (it will be at most one purchase record) or to have it deleted once any warranty obligations have passed.