Security
Your guests' data, treated like it matters.
A hotel holds passports, cards and home addresses. Here's how Ovelio protects them.
Roles and permissions
Seven roles. Every operation checks permission on the server, not just on screen.
Full activity log
Every change records who made it, including changes by AI, by the booking engine and by the channel manager.
Cards never touch us
Payments run on Stripe, in your own Stripe account. We never see or store card numbers.
Encrypted secrets
Keys for your myDATA provider and other connections are stored encrypted.
Daily backups
The database is backed up every night and kept for two weeks.
Privacy-first analytics
Visitor counting without cookies by default; IP addresses are never stored.
Safe AI access
OAuth sign-in or personal keys, revocable in one click. Staff management is never exposed.
Separate hotels
Every query is scoped to your hotel. Groups with several hotels switch between them explicitly.
Questions about security or a data request? Write to hello@ovelio.com
Run the whole hotel from one place.
Join the founding hotels for the 2027 season. We move your data across and set everything up with you.