1. Introduction

HostBuilt ("we," "our," or "us") operates the HostBuilt platform, including the website at hostbuilt.com, the host dashboard, and guest-facing booking websites (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information in the following ways:

Account Information: When you create an account, we collect your name, email address, and password (or OAuth credentials if you sign in with Google).
Property Information: Details about your rental properties including descriptions, photos, pricing, amenities, and availability calendars.
Payment Information: We use Stripe to process payments. We do not store your full credit card number on our servers. Stripe's privacy policy governs payment data.
Guest Information: When guests make bookings, we collect their name, email, phone number, and booking details.
PMS Integration Data: If you connect a property management system (e.g., Hospitable, Hostaway, Guesty), we store encrypted API credentials and sync reservation data.
Usage Data: We automatically collect information about how you interact with the Service, including IP address, browser type, pages visited, and access times.

3. How We Use Your Information

Provide, operate, and maintain the Service
Process bookings and payments
Sync calendar and reservation data with third-party platforms
Send transactional emails (booking confirmations, receipts)
Improve and personalize your experience
Respond to support requests
Detect and prevent fraud or abuse
Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only:

With service providers: Stripe (payments), Resend/SendGrid (email), Cloudflare (CDN and DNS), and connected PMS platforms — strictly to operate the Service.
Between hosts and guests: Guest contact details are shared with the host for the relevant booking, and property details are shown to prospective guests.
As required by law: To comply with legal processes, enforce our Terms, or protect rights, safety, or property.

5. Data Security

We implement industry-standard security measures including AES-256-GCM encryption for sensitive credentials, HTTPS for all data in transit, and secure session management. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. Booking records are retained for legal and accounting purposes. You may request deletion of your account and personal data at any time by contacting us.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability

To exercise any of these rights, contact us at the email below.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@hostbuilt.com.