Skip to content
Menu
EN

Typical forHotelsRestaurantsAttractions and experiencesEvents and festivals

AI on guest data. Your guests' names stay in the EU.

Answer complaints, sort bookings and write to guests in several languages with the AI you already use. GoalCube swaps names, booking numbers and phone numbers for codes before the AI sees them – and hides whatever is none of the AI's business.

Join the waitlistWhat can you use AI for?
  • Replies in minutes, not daysThe AI drafts replies to complaints and reviews. You edit and send.
  • Allergies and requests protectedThe name is hidden, so the AI only sees what the guest needs – not who the guest is.
  • Ready when guests askYour chatbot gets a ready-made notice saying it's an AI, and every use is recorded.
GoalCube Data VaultFictitious data
Guest messages July 2026 · 4 rows
Show
Your dataStays in the EU with GoalCube
GuestBookingHome townTopic
Emma GallagherBK-88213GalwayAllergy
Lukas WeberBK-87102MunichComplaint
Julie MoranBK-88990CorkChange
Daniel VellaBK-89311SliemaReview

Message We arrive on 14 August, two adults and a child. My daughter Hannah has a nut allergy – can the kitchen cater for it? Feel free to ring me on +353 86 214 7790. Kind regards, Emma Gallagher

What the AI seesIn ChatGPT, Claude or Copilot
GuestBookingHome townTopic
[PERSON_1][BOOKING_1][STED]Allergy
[PERSON_2][BOOKING_2][STED]Complaint
[PERSON_3][BOOKING_3][STED]Change
[PERSON_4][BOOKING_4][STED]Review

Message We arrive on 14 August, two adults and a child. My daughter [PERSON_5] has a nut allergy – can the kitchen cater for it? Feel free to ring me on [TELEFON_1]. Kind regards, [PERSON_1]

Task for the AI: Sort the messages, and draft replies to the urgent ones.
The answer in GoalCubeNames filled back in, only on your side

Lukas Weber is complaining about an unclean room and a long wait and should get a reply today. Emma Gallagher is asking about a nut allergy; confirm that the kitchen will cater for it. Suggested reply to Lukas Weber: "Dear Lukas Weber, we're sorry about the wait and the room. We'll refund one night."

The AI’s answerPseudonyms only

[PERSON_2] is complaining about an unclean room and a long wait and should get a reply today. [PERSON_1] is asking about a nut allergy; confirm that the kitchen will cater for it. Suggested reply to [PERSON_2]: "Dear [PERSON_2], we're sorry about the wait and the room. We'll refund one night."

17 sensitive values hidden from the AINo real names left the EU

Fictitious data. Point at a name or a pseudonym to see what belongs together.

What can you use AI for?

Choose a task. GoalCube works out the risk under the EU AI Act with fixed rules and tells you what to do.

GoalCube AI MapFictitious data
What will the AI be used for?
Minimal risk

Low risk. Approved automatically under your rules, and names and booking numbers are hidden before the AI reads the text.

Limited risk

Guests must be able to see they're chatting with an AI (Article 50 AI Act). GoalCube has a ready-made notice you can paste in.

Sensitive data

Allergies are health data (Article 9 GDPR). Use only what's needed; the AI only sees [PERSON_1] and the allergy, never the name.

Minimal risk

Minimal risk under the AI Act. But profiling for marketing needs a legal basis, and guests can always say no (Article 21 GDPR).

High risk

Biometric identification is listed in Annex III of the AI Act, and facial data is sensitive. It generally needs explicit consent and human control.

The example is simplified. In GoalCube you answer a few questions, and the classification follows fixed rules.

What the law says

Guest data is personal data

Names, bookings, phone numbers and requests in a prompt are personal data. You need a purpose, should use as little as possible and need a data processing agreement (DPA) with the AI provider.

Articles 5, 6 and 28 GDPR

Allergies and health are sensitive

A nut allergy or a wheelchair is health data. Use it only when needed to help the guest – and not together with the name in a US-based AI.

Article 9 GDPR

Chatbots must say they're AI

From 2 August 2026 guests must be able to see that they're chatting with an AI, unless it's obvious.

Article 50 AI Act

Guests from everywhere, same rules

GDPR applies to every guest you serve in the EU. Sending names to an AI in the US is a transfer out of the EU, which needs a specific legal basis.

Articles 44–46 GDPR

Short and simplified. GoalCube helps you follow the rules; it is not legal advice.

Your staff keep working. GoalCube keeps track of the rest.

Low risk is approved automatically under fixed rules. Anything that needs a human lands on This week’s list – typically around 5 minutes a week.

The employee
Your AI

Draft replies to all complaints from July, and put the urgent ones at the top.

All goodLow risk. Approved automatically under your rules.

Here are 14 draft replies. Two are urgent – an unclean room and a cancelled table booking. The names are at GoalCube.

The person in charge
This week’s listFictitious data

4 awaiting a human · approx. 5 minutes

Waiting for you

  • Confirm new use: booking chatbotLimited risk · must show it's an AI
  • Check use of allergies in bookingsSensitive data · needs a person

Approved automatically

  • Summary of customer enquiriesLow risk · approved automatically on Monday
  • Overview of supplier contractsLow risk · approved automatically on Tuesday

What you need

Start free with the overview. Add protection when you want to use AI on real data.

AI Map

Map

0 € per month

  • AI inventory and AI policy
  • Training with proof
  • Deadlines, templates and report
Recommended for you

Data Vault

Map and protect

from 9 € per month

  • Everything in AI Map
  • AI on your data, data stays in the EU
  • Secret terms and documents

Data Vault + Human Decision

GoalCube for HR

from 15 € per month

  • Everything in Data Vault
  • A person decides on cases about people
  • Passkey, log and timestamps

See all prices All prices are per month and exclude VAT. Pay yearly and get 2 months free. Prices apply from launch, which we expect in November 2026.

Questions and answers

Can we use ChatGPT to reply to reviews?

Yes, you can. A public review often includes a name, so make sure the AI gets nothing more than the text. With GoalCube the AI only sees a code instead of the name, and the use is listed in your AI inventory.

Is an allergy sensitive data?

Yes. Allergies and other health conditions are special category data under Article 9 GDPR. Use them only to help the guest, and never send them together with the name to an AI outside the EU.

Does our chatbot have to say it's an AI?

Yes. From 2 August 2026 people must be able to see that they're talking to an AI, unless it's obvious. A short notice at the top of the chat is enough. GoalCube has a ready-made template.

What about guests from outside the EU?

GDPR protects everyone whose data you process from your business in the EU – including tourists from the US or Asia. The rules are the same.

Do reception staff need training?

Everyone who uses AI at work needs sufficient AI literacy (Article 4 AI Act). GoalCube's AI literacy training has five short lessons and gives each employee proof of completion.

Read more

Other solutions for customers

Ready to use AI on guest data?

We expect to launch in November 2026. Join the waitlist and we’ll let you know when you can get started.