New ✨
Self-service channel manager mappings — you can now map your STAAH or SiteMinder rates and room types yourself, under Settings > Integrations, without waiting on support.
Payment Links for Windcave — Payment Links are now available to properties on Windcave as well as Stripe. Send a guest a secure link to pay online in their own time, with no need to key in their card details for them.
Enhancements 🥳
Add an extra to several room stays at once — in a group booking, add an extra to one room stay and tick the others it should apply to. Every extra matches the quantity and price of the first one, so there's no repeating yourself room by room. Not available for extras charged by percentage.
Guest marketing consent — record whether a guest has agreed to receive marketing from you, with a new checkbox on the guest profile and a matching column in the guest export.
Account security — a round of improvements to make MFA and passkeys easier to manage:
Name your credentials — give each passkey and your authenticator app an optional label, so you can tell your devices apart at a glance.
Backup codes — you're now asked to confirm you've saved your backup codes before moving on, so they're there when you need them.
Security badges — your user list and user pages now show password strength, authenticator app, passkeys, and a warning when someone is missing backup codes.
Extra verification for API credentials — you'll be asked to verify your identity before creating an API token or generating a webhook signing key.
Password reset signs you out everywhere — resetting a password now ends every active session on every device, so an old sign-in can't be used afterwards.
Simpler user management — Disable is now the main action on a user, Remove sits at the end of the menu, and you can send password or authenticator reset emails from the same place.
Clearer messages — authenticator errors now explain what actually went wrong, and buttons are disabled while a form is submitting so a slow response doesn't invite a second attempt.
Safer, less restrictive exports — we'll ask you to verify your identity before exporting bookings or guests, since those files contain guest personal information. In exchange, the guest export is no longer limited to six months at a time, and you'll get a confirmation prompt if you export without applying any filters.
Checked-out room stays are now locked — room stays that have already checked out can no longer be edited or dragged on the grid. This was never meant to be possible and could quietly change a completed stay. Most noticeable in group bookings.
Faster payment reconciliation report — the report now loads noticeably quicker.
Payment Links polish — press Enter to create a link, clearer errors when a link or an imported payment fails, and a warning if your description is too long to pass through to the payment page.
Bug fixes 🧰
Housekeeping notes — fixed arrival notes appearing on the departure note.
Automated emails — fixed checkout-related email tags using the check-in date instead of the check-out date.
Authenticator app setup — setting up or resetting your authenticator app is far more reliable. Fixed codes being rejected when a device clock was slightly out, the QR code changing on refresh, codes pasted with a space in them, and an expired setup reporting as an incorrect code.
Lightspeed POS (K-Series) — fixed the connection failing after a change on the Lightspeed side.
Email buttons — fixed button labels showing in the wrong colour in some email clients.