Priced per property — local-first by design.

On an AI box inside your property — a mini-PC, an NVIDIA DGX Spark, or your own compute; the installer targets Ubuntu Linux (22.04/24.04 LTS) today. The cloud portal only manages configuration — your box pulls a property.yaml and runs everything locally.

Each property runs an AI box on-site. The platform is hardware-flexible — a mini-PC, a generic x86/ARM server, or a high-end accelerator like an NVIDIA DGX Spark for larger fleets — and the installer targets Ubuntu Linux (22.04/24.04 LTS) today. Because inference happens on that box, guest conversations stay local by default: local-first is the architecture, not a setting you have to find. (An owner can opt a property into a cloud AI model with their own keys; when they do, that conversation text goes to their chosen provider and guests are shown an automatic disclosure.) We walk through hardware options (purchase or bring your own) at onboarding.

Almost none — and never conversations. No transcripts, no voice audio, no guest identities, no presence data: reasoning happens on the box. The cloud stores property config, persona settings, and device layouts. The one exception is deliberate: if a guest uses the guidebook's 'Report an issue' button (or requests an add-on), that short message and any contact they choose to add is stored so your host can follow up, and is emailed to the owner. Secrets (Wi-Fi, door codes, streaming logins) are stored only as references into your box's local secret store.

Yes — the bring-your-own-voice slot supports cloned voices, but it stays disabled until you provide proof of a voice-talent license. Out of the box, personas use an open, on-device neural voice (Fish-Speech), with a browser-speech fallback for GPU-free nodes; higher-fidelity neural voices are an optional add-on on supported accelerators.

The concierge keeps working. The box holds the last-pulled config and runs fully offline; only config updates wait for connectivity.

Optionally, per property, with an explicit guest-disclosure acknowledgement — local-first is the default and the brand promise. Cloud API keys are referenced, never stored in the portal.

Not yet. Billing is intentionally disabled in this preview while licensing and legal clearance are completed. Plans and pricing shown are targets, and beta requests are open — we onboard each property by hand and reach out.