PlaceCommand is a product of Redfish Labs LLC.
Privacy Policy
Last updated October 8, 2026
This policy explains how Redfish Labs LLC handles information for PlaceCommand. It covers the account information we collect as a business, and describes our role when we process data on behalf of a customer.
Controller and processor
For account and billing information, we are the controller. For the property, guest, vendor, and messaging records inside a customer workspace, the customer is the controller and we act as a processor under the Data Processing Agreement. Guests of a property should direct requests to the company managing that property.
Information we collect
- Account information — name, work email, company, and role of the people who sign in.
- Billing information — subscription details and billing contact. Card details are handled by our payment processor and are never stored on our systems.
- Customer Data — records a customer submits or imports, including properties, reservations, guest contact details and messages, vendor records, work orders, and attachments.
- Technical data — log and diagnostic information such as timestamps, request paths, and error traces.
- Integration data — data retrieved from services a customer connects, using credentials that customer supplies.
How we use information
To provide, secure, support, and improve the Service; to authenticate users and enforce workspace boundaries; to bill for subscriptions; and to send operational notices. We do not use Customer Data to train general-purpose models for other customers, and we do not sell personal information.
How we share information
We share information with subprocessors that run the Service on our behalf: cloud hosting and application delivery, the managed database and authentication provider, the transactional email provider, the payment processor, and the AI provider used to generate drafts. Each is bound by contract to process data only on our instructions. We may also disclose information where required by law.
Text messaging
We collect the mobile number a user enters and verifies, only to send PlaceCommand Alerts.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging opt-in data and consent will not be shared with any third parties.
Reply STOP to opt out. Reply START to opt back in. To delete the number, open Settings, then My account, and clear the mobile number on the Text alerts card.
Contact: support@placecommand.com
Cookies
The application uses a first-party session cookie to keep signed-in users authenticated. It is set only on the application host and is required for the product to function. The public marketing site does not set a session cookie.
Data retention
Customer Data is retained for the life of the subscription and for a limited export window after termination, after which it may be deleted. Logs are retained for a shorter operational period.
Security
Workspaces are isolated at the database level with row-level security so queries cannot cross organization boundaries. Integration credentials are encrypted per organization. Access to production systems is limited to personnel who need it.
International transfers
The Service is operated in the United States. If you access it from elsewhere, information will be transferred to and processed in the United States.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to certain processing. Contact privacy@redfishlabs.io. If your data sits inside a customer workspace, we will refer the request to that customer. Workspace administrators can also download a copy of their organization from Settings.
Children's privacy
The Service is a business tool and is not directed to children under 13, and we do not knowingly collect their personal information.
Changes and contact
We will post updates here with a revised date and notify account administrators of material changes. Questions: privacy@redfishlabs.io