Breaking Malta Budget 2027: the eco tax for short lets is set to increase to €10 per adult per night (capped at €80 per person) from 1 January 2027. Read more
Guestbud

Trust

Security and data protection

Guest identities, door codes and payments need care. Here is how Guestbud protects them.

Isolation

Every host account has its own data folder. Nothing is shared between accounts, and every request is bound to exactly one account by its credentials and domain.

Payments

Card data never touches our servers: guests pay on Revolut's PCI-compliant checkout or with Apple Pay / Google Pay. Each host uses their own Revolut account.

Door codes

Codes, Wi-Fi and the address are only shown after every check-in step is complete, only within the stay, and never to anyone without the private booking link.

Secrets and passwords

API keys and passwords are stored only as salted hashes. Payment, channel and lock credentials are encrypted at rest (AES-256-GCM).

Identity

Guests can verify their identity with the EU Digital Identity Wallet and share only the attributes needed. ID photos are private to the host.

GDPR

Data minimisation, statutory retention (e.g. German Meldeschein: deleted after one year), customer erase on request, and a full audit trail per account.