Privacy Policy
Last updated: October 2026
1. Data Controller
Derwish Rosalia
Netherlands
Email: privacy@hostpapers.com
2. What data we collect
When you use Hostpapers, we collect:
- Property information: Property name, address, check-in details, house rules, and local tips you provide in the form.
- Host contact information: Your name(s) and phone number for guest communication.
- Payment information: Processed by Stripe. We do not store credit card numbers.
- Usage data: Anonymous page views via Vercel Web Analytics (cookieless, no individual tracking).
3. How we use your data
- To generate and translate your personalized guest kit (including sending form text to OpenAI)
- To process payments via Stripe
- To enable you to download PDFs and share digital guidebooks
- To improve our service through anonymous analytics
4. Legal basis (GDPR)
We process your data based on:
- Contract performance: To deliver the guest kit you purchased.
- Legitimate interest: To improve our service and detect fraud.
5. Data retention
- Paid kits: Retained for 12 months from purchase, then automatically deleted.
- Unpaid drafts: Deleted after 30 days.
- Analytics: Aggregated, anonymized, no personal data retained.
6. Data sharing
We share data only with these processors:
- OpenAI: Property form text is sent to OpenAI to polish and translate guest-kit copy (see OpenAI's Privacy Policy). We instruct the model not to invent facts and not to retain Wi-Fi codes or phone numbers beyond the request.
- Stripe: Payment processing (see Stripe's Privacy Policy)
- Vercel: Hosting, private file storage, and cookieless Web Analytics (see Vercel's Privacy Policy)
We do not sell your data to third parties.
7. Your rights (GDPR)
You have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Delete your data (use the "Delete my kit" button or contact us)
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interest
- Complaint: Lodge a complaint with your local data protection authority
To exercise any right, email privacy@hostpapers.com.
8. Cookies
We use Vercel Web Analytics, which is cookieless and does not track individual users. We do not use marketing cookies or third-party trackers.
9. Security
Data is encrypted in transit (HTTPS) and at rest. We use industry-standard security practices. Payment information is handled by Stripe, which is PCI-DSS Level 1 certified.
10. Changes to this policy
We may update this policy. Significant changes will be communicated via email to paying customers.
11. Contact
For privacy questions or to exercise your rights:
privacy@hostpapers.com