Guest Invitations
How the guest invitation system works with three tokens (check-in, checkout, review), email delivery timing, and token expiry.
Overview
When you create a stay, STRProof generates three unique tokens for the guest. Each token corresponds to a specific step in the guest's journey. Tokens are HMAC-signed and stateless — guests do not need accounts.
The three tokens
| Token | Purpose | When it is used |
|---|---|---|
| Check-in token | Opens the check-in flow (guide, rules, consent, photos) | On arrival day |
| Checkout token | Opens the checkout flow (room photos) | On checkout day |
| Review token | Opens the post-stay feedback form | After checkout is complete |
Each token is a unique URL that can be opened in any mobile browser. No app download or account creation is required.
Email delivery timing
If you provided the guest's email when creating the stay, STRProof sends emails automatically:
| Email | Sent when |
|---|---|
| Check-in link | The morning of the check-in date (property timezone) |
| Checkout link | The morning of the checkout date |
| Review link | One hour after the guest completes checkout |
You can also send links manually at any time from the stay detail page by clicking Send Check-In Link, Send Checkout Link, or Copy Link.
Token expiry
| Token | Expires |
|---|---|
| Check-in | 48 hours after the check-in date |
| Checkout | 48 hours after the checkout date |
| Review | 7 days after checkout is completed |
After a token expires, the guest cannot open that link. If a guest needs access after expiry, you can generate a new link from the stay detail page.
Security
- Tokens are cryptographically signed and cannot be forged or guessed.
- Each token is unique to a specific stay and guest.
- Tokens do not expose any account information — they are stateless.
- Only the holder of the link can access the corresponding flow.
Manual sending
You do not have to rely on email. From the stay detail page you can:
- Copy any of the three links and send them through WhatsApp, SMS, Airbnb messenger, or any other channel.
- Resend an email if the guest did not receive the original.
This is useful for guests who booked through platforms where you do not have their email address.
Tips
- Send the check-in link a few hours before arrival so the guest has it ready.
- If a guest reports that a link does not work, generate a new one from the stay detail page.
- Keep track of which guests have completed each step from the stay detail page.