Privacy Policy

1. What we collect

We collect the information you provide when you create an account, book a demo, or contact us — your name, business email, property details, and payment information. When you use the Service, we collect the operational data you enter, including reservations, guest profiles, and configuration.

2. How we use it

We use your data to provide and operate the Service, support you, secure the platform, and improve our products. We process guest data only on your behalf — you are the controller, we are the processor.

• Operational data (bookings, folios, housekeeping) is used solely to run your property.
• We use aggregated, anonymized insights to improve pricing and forecasting features.
• We never use your guest data for our own marketing, and we never sell data.

3. Guest data

Guest profiles, documents, and stay history belong to your property and your guests. We handle this data under your instructions and in line with data-protection law. We retain it only as long as your account is active or as required by law, and you can export or delete it at any time.

4. Sharing

• We share data only with sub-processors needed to run the service (hosting, email delivery, payments).
• We share data with OTAs and partners only when you connect them through integrations.
• We disclose data to authorities only where legally required, with notification to you where permitted.

5. Security

We protect data with encryption in transit and at rest, role-based access controls, two-factor authentication, audit logs, and automated backups. Our security architecture is documented on the security page, and our controls are audited under SOC 2 Type 2.

6. Retention

We retain your account data while your account is active. If you cancel, you can export your data for 30 days. After that, we delete or anonymize personal data in line with our retention policy, except where we are required to keep records by law.

7. Your rights

You can access, correct, export, or delete the data you control at any time from your account settings or by contacting us. Guests whose data your property processes can exercise their rights with you as the controller — we support you in honoring those requests.

8. Cookies

We use essential cookies to run the Service and, where you consent, analytics cookies to understand how the site is used. You can control cookies through your browser. We do not use third-party advertising cookies.

9. Changes

We will notify you of material changes to this policy by email or in-product notice. The date of the latest update is shown below.

10. Contact & DPO

For privacy questions or data requests, email privacy@hospios.dev or write to HospiOS, Privacy Team. You can also reach out through the contact page. This policy was last updated on 1 August 2026.