Legal
Last updated 9 September 2026
This explains what Hostomat collects, why, who else touches it, where it lives, and how to get rid of it. The company responsible for your data is Hostomat Inc., 2810 North Church Street, Wilmington, DE 19802, United States. We sell nothing to anyone.
Account: your name, email address, and a hashed password. If you sign in with Google we receive your name and email from Google, never your password.
Listings: when you connect, we import your listing titles, descriptions, amenities, property details, address, currency, and photos, plus your calendar availability and nightly prices, and your guest reviews.
Pricing: the settings you choose (floor, base, ceiling, strategy), the prices we calculate and write, and a daily performance snapshot so we can show you whether the service is working.
Usage: which pages and buttons you use in the app, a replay of those sessions with everything you type masked before it leaves your browser, and the errors the app hits while you use it. We use this to find where the product gets in your way and to fix what breaks.
Billing: when you subscribe, our payment partner holds your card. We receive only the card brand, its last four digits, its expiry, and the status of your subscription. Full card numbers never reach our servers.
WhatsApp, if you connect it: the phone number you verify and the messages exchanged with the assistant, kept so the conversation has memory and so you have a record of changes made by chat.
Support: the emails you send us, so we can answer them and remember what we told you.
To price your listings and audit them, which is the service you signed up for and the contract between us. Listing content, photos and reviews drive the audit and the comparisons; calendar data tells us how your demand is running; account data identifies you; billing data lets us charge the right amount.
We also have a legitimate interest in keeping the service secure, in finding and fixing faults, and in understanding how the product is used, which is what the usage data is for. Where the law asks for your consent, for example to connect WhatsApp, we ask for it. We do not build advertising profiles and we do not sell or rent data.
We use a small number of service providers, each for one job:
Our cloud infrastructure providers store our database, run sign-in, and serve the application. Your listing connection, and the route our price updates travel, runs through Hospitable's connectivity platform. An independent market data provider supplies anonymous information about comparable listings near you. AI providers under contract process your listing text and photos to produce the audit and power the assistant; they are used only to produce your results, never to build a profile of you. WhatsApp messages are delivered by Meta if you enable the assistant. Our email provider delivers the emails we send you. If you subscribe, payment is handled by Stripe through its Link service, acting as merchant of record, which handles your card details, receipts and any applicable tax under its own privacy policy. Product usage and errors are measured by PostHog, under your account id rather than your email.
Guest personal data is minimised. We store the reviewer name shown publicly on the review and nothing else about your guests. We do not import guest contact details, and we never message your guests.
We disclose data outside this list only if the law requires it, or to protect the service, our customers or the platforms we connect to from abuse.
Our servers and our providers are in the United States and in other countries where those providers operate. If you are in the United Kingdom or the European Union, your data is transferred to the United States to run the service. We rely on our providers' standard contractual clauses and equivalent safeguards for those transfers.
Every row in our database belongs to one customer and access is enforced at the database level, not only in application code, so one host cannot read another host's listings, prices or messages.
We set a cookie to keep you signed in, which the service cannot work without, and a cookie that lets our usage measurement tell one visit from the next. You can block the second one in your browser without losing any feature. We do not use advertising cookies.
For as long as your account exists. When you delete your account we remove your listings, pricing settings, history and messages within 30 days. Invoices and payment records are kept for as long as tax law requires, which is up to seven years. Anonymous market data about comparable properties is not personal to you and may be retained in cache.
You can disconnect a channel at any time from Settings, which stops all reading and writing immediately. You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to a particular use of it by emailing us, and we will answer within 30 days. Where you have given consent you can withdraw it at any time.
If you are in the United Kingdom or the European Union you also have the right to complain to your data protection authority. We would rather hear from you first, and we will not treat you differently for exercising any of these rights.
Connections travel over encrypted links, access tokens are held server side and never exposed to your browser, incoming webhooks are cryptographically verified before we act on them, and card details are handled by our payment partner, never by us. No system is perfectly secure; if we learn of a breach that affects you, we will tell you without undue delay.
Hostomat is for people running a rental business and is not intended for anyone under 18. We do not knowingly collect data from children.
We may update this policy. If a change materially affects you we will let you know through the app or by email before it takes effect.
For any privacy question or request, email hello@hostomat.io, or write to Hostomat Inc., 2810 North Church Street, Wilmington, DE 19802, United States.