Privacy Policy

Last updated: May 29, 2026

This Privacy Policy explains how Hostics STR Analytics (“Hostics,” “we,” “us,” or “our”) collects, uses, and protects information when you use the Hostics web application and related services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Policy.

1. Who we are

Hostics is an analytics dashboard for short-term rental owners. The Service lets you record and import booking and expense data for your rental properties and view financial reporting based on that data.

For any privacy-related questions or requests, contact us at hello@hostics.app.

2. Information we collect

Information you provide directly:

• Account information: the email address you use to create your account, and your password (stored only in hashed form by our authentication provider — we never see or store your plain-text password).
• Property and financial data: information you enter or import about your rental properties, bookings/reservations, and expenses. This may include property names and addresses, guest booking details, dates, amounts, payout figures, vendors, and similar records.
• Billing information: when you subscribe to a paid plan, your payment is processed by our payment provider (Stripe). We do not collect or store your full payment card number; that information is handled directly by Stripe. We retain limited billing-related records such as your subscription tier, status, and billing email.

Information about uploaded files:

When you import data from a CSV or Excel file, the file is processed in your browser. We do notstore the uploaded file itself on our servers. Only the data extracted from it (your bookings or expenses) is saved to your account, along with a small import-history record that includes the file’s name, the type of import, the number of rows imported, and the date.

Information collected automatically:

Standard technical data necessary to operate the Service, such as log information generated by our hosting and infrastructure providers. We do not use the Service to build advertising profiles, and we do not sell personal information.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate you and secure your account;
• Process subscriptions and payments;
• Generate the financial reporting and analytics that are the core function of the Service;
• Send you transactional messages (for example, account confirmations, billing notices, and trial reminders);
• Respond to your support requests; and
• Comply with legal obligations.

4. Service providers (sub-processors)

We rely on a small number of trusted third-party providers to operate the Service. Each processes data only as needed to provide their function:

• Supabase — authentication, database, and backend infrastructure (stores your account and the property/booking/expense data you enter).
• Stripe — payment processing and subscription billing. Stripe handles your payment card information directly under its own privacy policy.
• Postmark — delivery of transactional emails.

These providers maintain their own privacy and security practices. We encourage you to review their policies.

5. How we share information

We do not sell your personal information. We share information only:

• With the service providers listed above, to operate the Service;
• If required by law, regulation, legal process, or enforceable governmental request;
• To protect the rights, property, or safety of Hostics, our users, or others; or
• In connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information becomes subject to a different privacy policy.

6. Data retention

We retain your account and the data you enter for as long as your account is active. If you close your account or request deletion, we will delete your personal data within a reasonable period, except where we are required to retain certain records to comply with legal, tax, or accounting obligations.

7. Your rights and choices

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, export, or delete it, and to object to or restrict certain processing.

To exercise any of these rights, contact us at hello@hostics.app. We will respond within the timeframe required by applicable law.

8. Security

We take reasonable technical and organizational measures to protect your information, and we rely on infrastructure providers that maintain industry-standard security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

11. Contact us

If you have questions about this Privacy Policy or our handling of your information, contact us at hello@hostics.app.