Privacy Policy

Last updated: October 2026

1. Data Controller

Derwish Rosalia
Netherlands
Email: privacy@hostpapers.com

2. What data we collect

When you use Hostpapers, we collect:

  • Property information: Property name, address, check-in details, house rules, and local tips you provide in the form.
  • Host contact information: Your name(s) and phone number for guest communication.
  • Payment information: Processed by Stripe. We do not store credit card numbers.
  • Usage data: Anonymous page views via Vercel Web Analytics (cookieless, no individual tracking).

3. How we use your data

  • To generate and translate your personalized guest kit (including sending form text to OpenAI)
  • To process payments via Stripe
  • To enable you to download PDFs and share digital guidebooks
  • To improve our service through anonymous analytics

4. Legal basis (GDPR)

We process your data based on:

  • Contract performance: To deliver the guest kit you purchased.
  • Legitimate interest: To improve our service and detect fraud.

5. Data retention

  • Paid kits: Retained for 12 months from purchase, then automatically deleted.
  • Unpaid drafts: Deleted after 30 days.
  • Analytics: Aggregated, anonymized, no personal data retained.

6. Data sharing

We share data only with these processors:

  • OpenAI: Property form text is sent to OpenAI to polish and translate guest-kit copy (see OpenAI's Privacy Policy). We instruct the model not to invent facts and not to retain Wi-Fi codes or phone numbers beyond the request.
  • Stripe: Payment processing (see Stripe's Privacy Policy)
  • Vercel: Hosting, private file storage, and cookieless Web Analytics (see Vercel's Privacy Policy)

We do not sell your data to third parties.

7. Your rights (GDPR)

You have the right to:

  • Access: Request a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Delete your data (use the "Delete my kit" button or contact us)
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interest
  • Complaint: Lodge a complaint with your local data protection authority

To exercise any right, email privacy@hostpapers.com.

8. Cookies

We use Vercel Web Analytics, which is cookieless and does not track individual users. We do not use marketing cookies or third-party trackers.

9. Security

Data is encrypted in transit (HTTPS) and at rest. We use industry-standard security practices. Payment information is handled by Stripe, which is PCI-DSS Level 1 certified.

10. Changes to this policy

We may update this policy. Significant changes will be communicated via email to paying customers.

11. Contact

For privacy questions or to exercise your rights:
privacy@hostpapers.com