Security

Access

Venue accounts are role-gated: a venue sees only its own conversations, handoffs, and reports. The operator role is separate. Reply-template changes require operator approval, and refunds are operator decisions.

Guardrails enforced in code

The inquiry engine asserts every reply against the venue’s approved price list before it sends — a reply containing an unapproved amount is blocked, not flagged after the fact. Availability is phrased as “appears open — not a reservation.” Hard questions route to a human with no auto-reply body. A venue configuration cannot go live until the engine self-test passes on that venue’s copy, and approval mode governs the first 7 days after install.

Data handling

Inquiries are processed for the venue only, never resold, and deleted on cancellation within 30 days on request. Report a concern to don+aisle-reply@lifeofmorr.com.