Privacy Policy

When you sign up and use Hostcation we collect:

• Account info — name, email address, and (optional) phone number you give us during signup.
• Property info — your listing URLs (Airbnb, Booking.com, Vrbo etc.), property location, photos and copy taken from those listings, and any iCal feeds you connect.
• Payment info — handled entirely by Stripe. We never see or store your card details. We do store a Stripe customer ID and subscription ID so we know who you are when Stripe tells us something has changed.
• Bookings made on your site — guest names, emails, phone numbers, dates and amounts, so we can show them to you in your dashboard and email both parties booking confirmations.
• Technical data — IP address, browser type, referrer, and pages visited, collected via standard server logs and (where used) cookies for security, analytics and abuse prevention.

• To provide the Hostcation service you've signed up for.
• To process your subscription payments via Stripe.
• To email you about your account: trial reminders, payment failures, booking notifications, and important service updates.
• To keep the service secure: detect abuse, prevent fraud, and meet our legal obligations.

We rely on (a) the contract between us and you, (b) our legitimate interest in running a secure service, and (c) your consent for optional marketing emails (which you can opt out of any time).

We only share your data with the processors we need to run the service:

• Stripe — payments, subscription billing, and host payouts.
• Resend — to send transactional emails (magic-link sign-in, booking confirmations, trial reminders).
• Neon — our managed Postgres database, hosted in the EU.
• Vercel — application hosting and CDN.

Each of these is a data processor acting on our instructions. We do not sell your data, and we don't share it with advertisers.

We keep your account data for as long as you have an active subscription, and for up to 7 years after closure to meet our tax and accounting obligations. Booking records (financial transactions) are retained for the same period. You can ask us to delete data sooner where we have no legal obligation to keep it.

We use a small number of strictly necessary cookies to keep you signed in and to detect abuse. We do not currently use third-party tracking or advertising cookies. If that changes, we'll update this policy and ask for your consent.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Ask us to delete it (where we don't need to keep it by law).
• Export it in a portable format.
• Object to processing or withdraw consent.
• Complain to the Information Commissioner's Office (ico.org.uk).

To exercise any of these, email hello@hostcation.com. We'll respond within 30 days.

Our processors may transfer data outside the UK (for example, Stripe processes payments in the EU and US). Where this happens, we rely on the UK addendum to the EU Standard Contractual Clauses and the UK's adequacy decisions to ensure your data remains protected.

If we make material changes we'll email account holders. The “Effective” date at the top will always show the current version.

Hostcation is a service of BoostMyStore Ltd, England & Wales. Questions, complaints or data requests: hello@hostcation.com.

This policy is governed by the laws of England & Wales.