Date: July 11, 2005
Subject: Important Booking Engine Information

Dear Booking Engine User,

As you may have seen in the news, there has been a series of credit card security issues that have occurred over the past few months. Although RezOvation and BedandBreakfast.com have not had any problems to date, the credit card issuing companies have become much more stringent with the way credit cards are stored on our systems. Because of this, we need to make some changes in the way we handle guest credit cards for our Booking Engine customers. At a high level, since we are not the merchant of record for your guest reservation Booking Engine transactions, we are not allowed to save guest credit card numbers at our facility.

What this means for you:

Going forward we will hold the full credit card number in our system for 72 hours after the reservation is booked to ensure that you are fully able to download it automatically. After that time we will store only a masked number that contains the last four digits of the actual number in the XXXX XXXX XXXX 1234 format.

You will be affected differently depending on how you use the Booking Engine system (Automatic Processing, Secure User Processing, or Stand Alone / Request Only). Please see the sections below for information regarding your specific situation.

For customers using Automatic Processing:

The overwhelming majority of our users are automatically processing the guest credit card through the Booking Engine. For those of you using this system, you can obtain the credit card again at check-in, you can log into the Booking Engine Administrator within 72 hours of the booking date , or you can contact the guest directly and obtain the full card number.

For customers using Secure User Processing (SUP):

Those of you who are not automatically processing the card but who are using Secure User Processing (SUP) are instantly taking the credit card number onto your computer via RezOvation Desktop. Those of you using this system are not really affected as you already receive the credit card number directly. Going forward we will hold the full credit card number in our system for 72 hours to ensure that you are fully able to download it automatically, and after that time we will store only a masked number that contains the last four digits of the actual number in the XXXX XXXX XXXX 1234 format.

For Stand-alone or Request-only users that currently have access to CC numbers:

If you are not processing the guest credit card automatically or if you are not using the Secure User Processing system , and you currently logging on through the Booking Engine Administrator to see the full CC number , you will now need to do so within 72 h ou rs of the booking date in order to see the full number. If you login after that 72 h ou r period, you will only see the last 4 digits in the masked number in the XXXX XXXX XXXX 1234 format. We apologize for any inconvenience this may cause, but we hope that 72 h ou r period is long enough for you to get the information you need .

If you are using the Booking Engine stand-alone product (i.e. you do not have RezOvation Desktop) , you will also have a 72 h ou r period to get the full CC number. After that time period you will only see the masked number in the XXXX XXXX XXXX 1234 format. Again, we apologize for any inconvenience, but we hope that 72 hour period is long enough for you to get the information you need .

How to obtain card information from the Booking Engine:

Please see the following FAQ on our web site: http://www.rezovation.com/FAQ/faq_BE-retrieve-CC.html

In summary, we apologize that we have had to take these steps, but we are sure you understand that with all the recent credit card security problems on the I nternet, we are trying to be pro active in protecting sensitive customer data. We want to make sure that we are in compliance with current security measures and most importantly we don't want your or your guests to be under any unnecessary or preventable credit card security risk.

If you have any questions on this, please let us know.

Regards,

RezOvation Support
support@rezovation.com
512-354-7100