Data controller
The data controller is Hostpilotapp, reachable at contact@hostpilotapp.io. For GDPR requests: contact@hostpilotapp.io.
Data processed
Depending on your use: account data, properties, settings, technical logs, channel identifiers and mapping states, iCal URLs and imported events, bookings, subscription status, billing history and content submitted to AI features.
Card data is processed by Stripe.
Purposes and legal bases
Processing provides the SaaS, manages security, billing and fraud prevention, improves the product, provides support and sends service communications.
Cookies and analytics are processed under the cookie policy and consent where required.
Providers
Supabase provides database and authentication services, Stripe provides payments, Vercel hosts the application, and Meta and Google Ads receive campaign measurement events only after consent (Meta Pixel/Conversions API and the Google tag).
AI providers may process context needed for requested outputs. Transfers outside the EU may occur with appropriate safeguards sought from providers.
Retention
Data is retained during the contractual relationship, then archived or deleted within a reasonable period, subject to legal obligations. Technical logs are retained for a limited period.
Your rights
You have rights of access, rectification, erasure, portability, objection, restriction and withdrawal of consent.
To exercise your rights: contact@hostpilotapp.io. You may also lodge a complaint with the competent supervisory authority.
Security
HostPilot implements appropriate measures such as access control, encryption of certain sensitive data and HTTPS. No system is completely risk-free.
Minors
HostPilot is intended for adult hosts and is not designed for people under 18.
Changes
This policy may be updated; substantial changes may be communicated through the service or by email.