Do my guests need to download anything?

No. Guests scan the QR code in the room and Phil opens in the phone's browser. They sign in with a code texted to the phone on their booking, or the stay code from check-in.

What happens when Phil can't handle something?

Phil says so instead of guessing. A guest who needs a person gets your front desk's number or call button, and your team can take over any chat from the dashboard.

How do guests pay for what they order?

Charges go straight to the room folio, settled at checkout. Card payments through your hotel's own processor, such as Stripe, are coming soon. The money goes straight to your hotel. Foyer never holds it. For orders paid through the room folio, when your team confirms an order, the charge goes on the guest's room bill: Foyer posts it to your PMS once charge posting is switched on for your property, and until then your front desk adds it in the PMS. Each room charge keeps its evidence: how stay access was verified, the device and the conversation.

Can Phil make things up?

Prices and confirmations are checked in code, and Phil says an order is done only after it is saved. Phil uses AI to understand messages and can make mistakes. Guests in danger should call emergency services directly.

How long does setup take?

3–7 business days. We contact you within 24 hours of payment, your dashboard opens within 48 hours, and we load your menus, rooms and hours and connect your PMS with you. The same standard setup for every property, included in the plan.

Which PMS does Phil work with?

Works with Mews, apaleo, Cloudbeds, Oracle® OPERA Cloud and Beds24. Using another PMS? Tell us. We add new PMS integrations to Foyer for every hotel. Stays sync on their own (arrivals, room moves, check-in and checkout). On the Revenue plan, a charge your team confirms is posted to the guest's bill in your PMS once charge posting is switched on for your property. We connect it during onboarding with access your PMS issues to your property; a connected PMS is required, because Phil works from your live stays.

What languages does Phil speak?

Twelve: English, Turkish, Spanish, German, French, Italian, Portuguese, Russian, Arabic, Chinese, Japanese and Korean. Phil answers in the language the guest writes in; staff read everything in their own.

Browse the documentation

Data and privacy

Where guest data lives, who can see it, how long it is kept, and how to answer a guest who asks.

How Phil treats guest data, in short. The full Privacy Policy is at /privacy; a signed data-processing agreement is available on request.

Roles#

Your property is the controller of guest data; Foyer Intelligence is the processor.
We act only on your instructions and only to run the service.
You decide what Phil knows about the property, who on your staff can see what, and when a guest's record should be deleted.

What is stored, per guest#

Data	Why	Kept
Room, reservation reference, booking phone	To send the stay link and codes to the right person	Full phone number during the stay; only the last four digits after checkout. Codes expire in minutes
Conversation with Phil	To answer, and so staff can read context when they take over	12 months after checkout, then deleted (anonymised copies excepted, see below); deletable per guest on request
Requests, orders, reservations, offer claims	The service record your staff act on	12 months after checkout; needed for disputes and history
Charge evidence: last-4 of phone, device, verification method, chat excerpt	To support a room charge if the guest questions it	12 months after checkout
Voice calls: time, length, outcome, summary, links, last four digits of a phone number and a redacted transcript	To count call minutes and show your team what happened	12 months, then deleted (anonymised copies excepted, see below). Transcribed only: Foyer never stores call audio
Device identifier	To recognise devices admitted to the stay	Access ends at checkout; the device record is deleted with the reservation 12 months after checkout, and the browser cookie can last 400 days

Anonymised copies, which identify no guest and no Property, may be kept after the originals are deleted, to improve Phil, as described in the Privacy Policy.

Never asked for: payment card numbers, passport or ID scans, passwords. Card numbers, and passwords a guest labels as such, are masked before a message is stored. Anything else a guest chooses to type into the chat is kept as part of that conversation.

Where it lives#

The database is in Frankfurt (AWS eu-central-1, operated by Supabase). Encrypted in transit and at rest.
Every table carries the hotel identifier, and Foyer's server scopes every staff and guest request to the hotel in the signed session, so a staff key from one property cannot read another property's rows.

Who can see it#

Your staff, according to their role, department and pages: staff see their department's queue; leads and managers see all of the property; nobody sees another property.
The Foyer team: during your first 30 days, to review conversations and tune Phil for your property; after that, when you ask for support on a specific issue.
Providers that run parts of the service: database (Supabase), hosting (Vercel), our automation server (Hostinger), the language model (OpenAI), usage analytics with all text masked (Microsoft Clarity), and, where used, Telegram for your staff's cards and notifications. The full list is in the Privacy Policy.
Nobody else. We do not sell data or share it with advertisers.

AI, specifically#

Message text is sent to the language-model provider (OpenAI) to draft each reply.
OpenAI does not use API data to train its models by default, and may keep inputs and outputs for up to 30 days for abuse monitoring.
Prices and saved confirmations have code checks. Emergency handling uses fixed rules with an AI fallback.
Phil answers property questions from your knowledge base, not from the open internet.

When a guest asks#

“What do you have on me?” Ask us and we provide the guest's requests and conversation within 30 days.
“Delete my data.” Email support@foyerintelligence.com with the property, room and dates; we delete the guest's conversation and records within 30 days and confirm. When a guest's data is erased, anyone who shared the stay keeps their own messages and access; the guest's name, phone number and email are removed from the conversation they shared, which is kept because its messages cannot be told apart by speaker. Only what billing needs is kept, without the guest's details: the length of calls for call minutes, the record that the guest asked for a call with only the last four digits of the number, and the count of the stay's check-in.
“Why did you text me?” The stay link and codes go only to the phone on the booking. If the number is wrong, correct it in the PMS.

When you leave#

You can export everything for 30 days after the subscription ends.
Then it is deleted from live systems, except the anonymised copies described in the Privacy Policy, which identify no guest and no Property; database backups roll off within 7 days after that.

Something unclear or out of date? Write to support@foyerintelligence.com.