Privacy Policy

Your account. When you sign in with Google we receive your name, email address and profile photo. We use them to show who you are to your team and to send you service emails.

Your team. The names and email addresses of people you invite, and which team they belong to. If you invite someone who has no account yet, we keep their email address until they sign in or you cancel the invitation.

Your properties and tasks. The property names and addresses you enter, the tasks and automatic tasks you create, who they are assigned to and when they were done.

Your bookings. When you connect a calendar link or a booking system, we read the bookings it provides and keep the check-in and check-out dates and whatever the source includes, such as a guest name, number of guests and the booking channel. We never read payment details.

Booking system keys. If you connect a booking system, the key you paste is stored encrypted. Only the last few characters are ever shown back to you. The key is used solely to read bookings and the list of your properties from that system.

Technical records. Standard server logs with request ids, timestamps and error messages, kept to keep the service running and to fix problems. A session cookie keeps you signed in, and a second cookie remembers the language you picked.

To run the service: show your board, create tasks from bookings, let your team work together, and sign you in. To support you when you email us. To keep the service secure and to fix bugs. We do not sell your information and we do not use it for advertising.

Your team. People on your team see the properties, bookings and tasks of that team. Owners also see who is on the team and who has been invited.

Companies that help us run hostokay. Our hosting and database provider stores the data; Google handles sign-in. When you connect a calendar or a booking system, we send requests to that company to read your bookings. Each of them processes data only as needed to provide their service to us.

Nobody else, unless the law requires it or you ask us to.

Your data is stored on servers in the European Union. We keep it for as long as you have an account. Past bookings are kept so your task history makes sense. When you delete your account, your personal data is removed within 30 days, except for server logs, which expire on their own, and anything we must keep by law. Removing a calendar link or booking system removes the bookings that came from it.

You can ask us at any time to see the data we hold about you, to correct it, to export it, or to delete it. You can also object to how we use it. Email hello@hostokay.com and we will reply within 30 days. If you are in the European Union you also have the right to complain to your local data protection authority.

Guest names and dates reach hostokay through the calendars and booking systems you connect. You, as the host, are responsible for having the right to share that information with your team. We process it only on your behalf and only to show you bookings and create tasks.

hostokay uses two cookies: one keeps you signed in, the other remembers the language you chose. There are no advertising or tracking cookies.

If this policy changes in a way that matters, we will tell you in the app or by email. The date at the top shows the latest version.