Privacy Policy

Who we are

Recover Hospitality provides a private support service to employees of partner hospitality employers. Through SMS and a mobile web app we help employees navigate their employer's benefits and find local community resources.

What we collect

• Account info from your employer: name, work email or mobile number, location, role.
• Messages you send to us and our replies to you.
• Short notes the assistant saves so it can remember your context (e.g., "prefers mornings"). You can view and delete these at any time on the You screen.
• Aggregate, de-identified usage signals (counts, topics) used for service improvement and the manager analytics described below.

Your conversations are private

Your manager, your HR team, and your employer cannot read what you ask us or what we tell you. Their dashboards only show counts and trends across the whole team, with cells below 5 employees automatically suppressed.

The only individual-level signal that ever crosses to your employer is a binary opted-in / opted-out indicator, used for billing and offboarding reconciliation. It contains no content, topics, or activity.

Safety exception

If a conversation contains signals of self-harm, suicide, overdose, domestic violence, or acute psychiatric distress, a clinically qualified Recover Hospitality reviewer may access the relevant messages to ensure your safety. Records of safety reviews are retained even after account deletion as required for safety auditing. They are never shared with your employer.

SMS program disclosures

By replying YES to our welcome message, you consent to receive recurring text messages from Recover Hospitality, including responses to your inquiries, scheduled follow-ups, and program updates.

• Message frequency. Varies by your activity. Average four messages per month; higher if you actively engage in a conversation.
• Message and data rates. Standard carrier rates from your mobile provider may apply.
• Opt out anytime. Reply STOP. Re-join by replying START or by contacting your HR team.
• Help. Reply HELP or email help@recoverhospitality.com.
• No third-party sharing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Mobile information is never sold or shared. Subprocessors (Twilio for SMS delivery; AI providers for message processing) operate under contractual data-protection terms.

Data retention

Conversation content is retained for 24 months by default, then automatically deleted. Safety-flag audit records are retained indefinitely. You may request earlier deletion at any time via privacy@recoverhospitality.com.

Security

All conversation data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is enforced at the database layer, audit-logged, and limited by role.

Subprocessors

• Twilio (SMS delivery)
• Anthropic and / or OpenAI (AI message processing, subject to BAAs)
• Render (application hosting)

Your rights

You may request a copy of, correction of, or deletion of your data at any time by emailing privacy@recoverhospitality.com. Massachusetts and California residents have additional rights under 201 CMR 17.00 and CCPA / CPRA respectively.

Contact

Recover Hospitality · privacy@recoverhospitality.com