Privacy Policy

Last updated: September 2026

HostiInfo ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and other applicable laws.

1. What data we collect

We may collect the following personal data:

• Account information — name, email address, and hashed password when you register.
• Property information — property name, address, and guide content you create.
• Usage data — pages viewed, features used, browser type, IP address, and timestamps.
• Guest interaction data — anonymous page-view analytics for your guest guides.
• Communications — messages you send us via email or support channels.
• Billing data — your name, billing address, VAT identification number (if provided), and subscription plan and history. Your payment method (card details) is collected and processed directly by our payment processor, Stripe, and is never stored on our servers.

2. How we use your data

We use your data to:

• Provide and maintain the HostiInfo service.
• Authenticate your account and keep it secure.
• Send transactional emails (account verification, password resets).
• Improve our product based on aggregated, anonymised usage patterns.
• Comply with legal obligations.

We do not sell your personal data. We do not use your data for automated decision-making or profiling.

3. Data storage & security

Your data is stored on servers within the European Union. We use industry-standard security measures including encryption in transit (TLS), hashed passwords (bcrypt), and regular security audits. Access to personal data is restricted to authorised personnel only.

4. Third-party services

We may use the following third-party services:

• Cloud hosting providers (EU-based) for infrastructure.
• Email delivery services for transactional messages.
• Analytics tools that process anonymised, aggregated data only.
• Stripe, Inc. and Stripe Payments Europe, Limited — our payment processor, for payment processing, invoicing, and tax (VAT) calculation on paid subscriptions. Stripe receives your name, email address, billing address, VAT identification number (if provided), and your payment method details; we do not receive or store your full card details. See Stripe's privacy policy for how Stripe handles this data.
• Google Maps — the map in a guest guide's Local Guide is off by default and loads nothing until the guest taps "Show map". From that tap onwards Google receives the guest's IP address and standard request data in order to serve the map. Guests who never open the map are not in contact with Google at all. See Google's privacy policy.

All third-party processors are bound by data processing agreements and comply with GDPR requirements.

5. Data retention

We keep your account and property data for as long as your account is active, and for a reasonable period afterwards to allow you to reactivate it or export your data. Invoices and other billing records are kept for [VERIFY WITH ACCOUNTANT] — currently assumed to be 10 years, per Lithuanian accounting law as required by Lithuanian accounting law. Where we are required to retain data for a legal, tax, or accounting obligation, we retain only the data needed for that purpose and delete it once the retention period ends.

6. Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Export — receive your data in a portable, machine-readable format.
• Rectification — ask us to correct inaccurate data.
• Deletion — request erasure of your personal data ("right to be forgotten").
• Restriction — ask us to limit processing of your data.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookie policy

HostiInfo uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Essential cookies cannot be disabled as they are necessary for the service to function.

8. Data controller & contact

The data controller for the personal data described in this Privacy Policy is [COMPANY NAME] ("we", "us", "our"), company code [COMPANY CODE], registered at [REGISTERED ADDRESS]. Our VAT identification number is [VAT NUMBER].

Company details pending — not yet in force for paid plans.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

This policy may be updated from time to time. We will notify registered users of material changes via email.