Reservation holds, expiry, and abuse guardrails ship on Tier 3

Free reservation holds help renters move in without paying online first — but open holds can be abused if bots or bad actors squat on units. StoreAll now ships practical guardrails owners can tune.

What shipped

• Honeypot on public reservation forms
• Rate limits per IP and per email
• Cap on concurrent open reservations per customer
• Auto-expiry on unpaid holds (configurable hours, default 72)
• Optional verified customer account required before reserving

Settings live under Manage → Settings → Reservation protection.

Operator guidance

Start with defaults. If you see noise, shorten hold hours or require accounts. If conversion drops, loosen one lever at a time.

Deeper walkthrough: Protecting free reservations from abuse.

When to use Tier 3 holds

If after-hours web demand piles up in voicemail, see When your facility needs online reservations.