Security
Hotels trust Ahohou with guest details and money records. This page explains, in plain words, how we protect them, what we never do, and how to spot a fake message that uses our name.
How we protect your data
Safe hosting
Ahohou runs on Google Cloud in London. Pages and the app load over HTTPS only, and data is encrypted in transit and at rest.
Separate properties, separate roles
Each property can see only its own data. Staff see only what their role needs. Payment provider keys are visible to the property owner only.
We never hold your money
Guest payments go to your own provider account. We never see a card number. A payment is posted only after the provider’s own status check agrees, and a payment we cannot verify is held for review.
Private guest links
Each guest’s stay link is long, random and valid for one booking. It expires after the stay, and the property can cancel it at any time. We keep only a scrambled copy of it.
A record of every action
The ledger is never rewritten, refunds need a reason, and the activity log shows who did what and when.
Checked before every release
Every change passes automated tests and a security check before it is published, and we scan the software we depend on for known weaknesses.
We are in a pilot. Before a property goes live with real guest payments, we complete further checks, including an independent review and a recovery test.
Spotting phishing and fake messages
Criminals copy the names of trusted companies. Please keep these rules in mind:
- Check the address. Our website is ahohou.com, and our email addresses end in @ahohou.com. For the pilot app we will send you only to ahohou.com or to the exact address in your pilot invitation.
- Our official WhatsApp number is +233 20 821 5518. If a message that claims to be from us comes from a different number, check with us on this number or by email before you reply.
- We never ask for secrets. We will never ask you for a password, a PIN, a card number or a payment provider key by email, WhatsApp, SMS or phone.
- Be careful with urgency. Messages that say “act now or your account will close” are a warning sign. Contact us on a number or address you already trust.
- Guests: if a message asks you to pay through a link you were not expecting, call the property on its published number before you pay.
- Forward suspicious messages that use our name to admin@ahohou.com. Please do not click anything in them.
Keep your account safe
- Use a strong, unique password, and never share a login.
- Give each member of staff their own account and the lowest role that lets them do their job.
- Remove accounts for people who leave.
- Keep your payment provider keys private. Only owners should see them.
Report a security problem
If you find a weakness in Ahohou, please tell us at admin@ahohou.com with the subject “Security”. We will acknowledge your report within three working days. If you act in good faith, report privately, and do not access or change other people’s data, we will not take action against you. You can also find our details in our security.txt file.