← HostHub

Privacy Policy

Effective: October 9, 2026

  1. 1. Two different roles

    This policy covers two things that are easy to confuse. For the account of the landlord or property manager who signs up, we decide why and how the data is used — we are the controller. For everything they then put into HostHub about their guests, tenants and staff, they decide and we only act on their instructions — they are the controller and we are their processor.

    If you are a guest or tenant and want to know what a particular host holds about you, ask that host. We will help them answer, but the data is theirs to explain.

  2. 2. What we collect

    As controller, for your account:

    • Your name, email address and a bcrypt hash of your password. We never store the password itself.
    • Your timezone, language and display preferences.
    • Billing status and your Stripe customer and subscription identifiers. Card numbers are entered on Stripe's own forms and never reach our servers.
    • Usage counters — how many AI calls, emails and pricing lookups your account has made this month — used to apply plan limits.
    • Credentials you choose to store for services you connect, such as a Hostex API key or your own Stripe key.
    • Technical records needed to run the service: an activity log of actions taken in your account, and error reports.

    As processor, on your instructions, HostHub stores whatever you enter about:

    • Guests and tenants: name, email, phone, WeChat id, guest count, stay dates, payments, deposits, notes, uploaded identity-verification status, signed contracts and message history.
    • Staff and cleaners: name, contact details, assigned tasks and uploaded cleaning photos.
    • Owners in profit-sharing arrangements: name, contact details and ledger entries.
  3. 3. Why we use it

    • To provide the service you asked for — the legal basis is performance of our contract with you.
    • To take payment and prevent fraud — performance of contract, and our legitimate interest in being paid.
    • To keep the service secure and diagnose faults — our legitimate interest in a working, safe product.
    • To email you about your account, and — only if you opt in — about the product. You can unsubscribe from the latter at any time.
    • To meet legal obligations such as tax records.

    We do not sell personal data or use guest, tenant or account content to target ads or train AI models. Optional ad conversion measurement is described below.

    To answer a support request or look into a problem, authorised HostHub support staff may open your account in a read-only view. They cannot change anything in it, each such access is recorded on our side, and it is used for nothing else.

    If you ask for a demo on hosthub.me, we keep your name, email, phone, city and type of rental business to contact you about HostHub, and build you a demo account filled with invented data. We email you the link to it, and once more a day later to offer to keep it as your own account. The demo is deleted 14 days after it was made; if you keep it, its invented data is erased first and the account becomes an ordinary one.

  4. 4. Optional ad conversion measurement

    If you arrive through a paid Facebook or Instagram ad, signup may offer a separate checkbox. It is unchecked by default. Only if you choose it and verify your email address, HostHub may send Meta one CompleteRegistration event with the event time and random event id, a SHA-256 hash of your email address, your browser's user-agent and the email verification page URL. Meta processes that information under its own terms to help measure the ad. Declining does not affect your account or trial. We do not send your password, IP address, property records or guest data for this purpose, and this server-side event does not set advertising cookies.

    If a Google ad link includes a click ID, we may keep it in your browser session to carry it to signup. A separate Google measurement checkbox is unchecked by default. Only if you select it do we store the click ID with your account. After you verify your email, we may send Google the click ID, verification time, a random event ID and a consent signal to measure the signup. We do not send Google your email, name, IP address, password, property or guest data for this purpose, and we do not set an advertising cookie. Declining does not affect your account or trial. We remove stored click IDs after accepted upload or before the 90-day click window ends. Google processes a sent event under its own terms; this choice does not permit ad personalization.

  5. 5. Who else touches the data

    We use these providers to run HostHub. Each is bound by a contract limiting them to processing on our instructions. Items marked optional only apply if you turn that feature on.

    • Vercel Inc. — Application hosting and file storage (Vercel Blob). All data in transit; uploaded photos, documents and signed contract PDFs at rest.
    • Neon Inc. — Managed PostgreSQL database. All account, property, booking, guest and message records.
    • Stripe, Inc. — Subscription billing, and guest payments where the customer connects their own Stripe account. Billing contact and payment details. Card numbers are entered on Stripe's own forms and never reach our servers..
    • OpenRouter, Inc. (optional) — Routes requests from the AI features (assistant, drafting, translation, note parsing, pricing suggestions) to the model host below. Only the text sent to a given feature — typically a booking note, a guest message or a pricing question. Routed only to hosts in the United States, with data collection by them refused.
    • DeepInfra, Inc. and Together Computer, Inc. (optional) — Run the AI model that answers those requests, in the United States. The same text as above, processed to produce an answer and not used to train models.
    • Channex (channex.io) (optional) — Channel management: availability, prices and restrictions sent to Airbnb, Booking.com and other channels; reservations and guest messages received from them. Reservation and guest data, and guest messages, for the listings the customer connects.
    • PriceLabs, Inc. (pricelabs.co) (optional) — Dynamic pricing for the listings a customer switches to PriceLabs: nightly prices and stay restrictions set from market data. Listing details, availability, and reservation dates and amounts, for those listings only.
    • Hostex (optional) — Channel management: calendars, reservations and guest messages. Reservation and guest data for the customer's own Hostex account, using the customer's own API key.
    • Our outbound email provider (SMTP) — Outbound email: account mail (verification, password reset, closure), and contracts, invoices, reminders and confirmations the customer sends. Recipient address and message content, including attached PDFs.
    • OpenStreetMap geocoders (Photon by komoot, Nominatim) (optional) — Placing a property on the map, for listing pages and market research. The property's address only — no guest or account data.
    • Functional Software, Inc. (Sentry) (optional) — Error monitoring. Error reports with request bodies, cookies and query strings stripped, and the user reduced to an account id.

    We will tell you before adding a new provider that processes personal data. We may also disclose data if the law compels us, and will tell you unless we are forbidden from doing so.

  6. 6. Where the data is

    Our database and file storage run in North America, and some providers above operate globally. Where personal data leaves its home region, transfers rely on the mechanisms that region recognises — for the EEA and UK, the Standard Contractual Clauses.

  7. 7. How long we keep it

    Account data is kept while your account is open. When you delete a record in HostHub it goes to the recycle bin and can be restored; deleting it there removes it.

    When you ask to close your account it is locked at once and permanently deleted 7 days later, so export your data first: a locked account cannot be signed into. After deletion nothing remains except backups that expire on their own cycle and records we must keep for tax or legal reasons.

  8. 8. How it is protected

    • Traffic is encrypted in transit; the database and file storage are encrypted at rest by our providers.
    • Passwords are stored only as bcrypt hashes. Sessions use signed, http-only cookies.
    • Every query is scoped to the account that owns the row, and that isolation is covered by an automated test suite that runs against two separate tenants.
    • Error reports are scrubbed before they leave our servers: request bodies, cookies and query strings are removed, sensitive headers redacted, and the user reduced to an account id.

    No system is perfectly secure. If a breach affects your data we will tell you without undue delay and, where required, within 72 hours of becoming aware.

  9. 9. Your rights

    Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to another provider. You may also withdraw consent where we relied on it, and complain to your data protection authority.

    Most of this you can do yourself in the app. For anything else, email platinumtravelca@gmail.com. We answer within 30 days and do not charge for it.

  10. 10. Cookies

    We set two cookies, both necessary: one holds your signed session so you stay logged in, and one remembers your language. We do not use advertising or analytics cookies, which is why there is no cookie banner.

  11. 11. Children

    HostHub is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16 as an account holder.

  12. 12. Changes

    If we change this policy materially we will tell you by email or in the app before it takes effect. The date at the top always reflects the current version.

  13. 13. Contact

    PLATINUM TRAVEL INC., 2980 Number 3 Rd, Richmond, BC V6X 2B3. Privacy enquiries: platinumtravelca@gmail.com.

The English text is the governing version; translations are provided for convenience.
PLATINUM TRAVEL INC. · 2980 Number 3 Rd, Richmond, BC V6X 2B3 · platinumtravelca@gmail.com