Host Guest Privacy Policy

1. Introduction

Host Guest, LLC ("Host Guest," "we," "our," or "us") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our website, mobile app, and related services (collectively, the "Platform").

By creating an account, publishing a listing, or booking a stay, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

2.1 Account Information

• Name, email address, phone number, date of birth, and profile photo.
• Passwords and login credentials.

2.2 Identity Verification Data

• Identity verification information such as government-issued identification, date of birth, address, and banking verification details are processed securely through Stripe Connect Express.
• In certain cases, Stripe may collect facial recognition or biometric data (for example, to verify that a selfie matches the ID document). This is performed solely by Stripe, with the user's explicit consent, in compliance with applicable biometric-privacy laws.
• Host Guest does not collect, store, or have access to any biometric or facial data.

2.3 Transaction & Payment Data

• Payment details are processed exclusively by Stripe Connect Express.
• Host Guest does not store or have access to full banking or card information.
• Transaction amounts, fees, and payout history are securely processed via Stripe.

2.4 Usage Data

• Platform activity (listings viewed, bookings completed, cancellations, reviews).
• Communication between Hosts and Guests (in-app messaging).
• Device information (IP address, browser type, operating system).
• Log data for security and analytics.

2.5 Location Data

• Approximate location through IP address.
• Precise geolocation if you opt-in via mobile device.

2.6 Sensitive Information (Limited)

• Only collected where strictly necessary (e.g., ID verification via third-party provider).

3. How We Use Your Information

We use your information to:

1. Operate, maintain, and improve the Platform.
2. Facilitate bookings, payments, and communication between Hosts and Guests.
3. Verify identities and manage badges (e.g., Verified Identity, Peace of Mind).
4. Process secure payments and payouts via Stripe Connect Express.
5. Detect and prevent fraud, spam, or off-platform transactions.
6. Enforce our Terms of Service.
7. Communicate updates, support, and marketing (when consented).
8. Comply with legal and regulatory obligations.

4. Legal Bases for Processing (GDPR Compliance)

For users in the European Economic Area (EEA):

• Contract: To provide and fulfill bookings or services.
• Consent: For optional features like marketing or location access.
• Legal Obligation: To comply with verification, tax, or payment laws.
• Legitimate Interest: To maintain platform security and prevent fraud.

5. How We Share Information

We do not sell your personal data. We may share information with:

1. Stripe Connect Express – for both identity verification and secure payment processing
2. AWS and Google Workspace – for encrypted data storage, analytics, and operations
3. Legal Authorities – only when required by law, subpoena, or valid legal request
4. Business Transfers – in the event of a merger, acquisition, or restructuring

Each partner maintains its own privacy and security policies, and Host Guest only shares the minimum data necessary to provide each service.

6. Cookies & Tracking Technologies

We use cookies and similar tools to:

• Keep you logged in.
• Remember preferences.
• Measure Platform performance.
• Support marketing and analytics.

You can control cookies through your browser settings. MVP analytics are minimal and used only for platform improvement.

7. Data Retention

• Account and verification data are retained as long as needed to provide services.
• Payment records and legal data are stored for up to 7 years to meet compliance requirements.
• MVP test data may be retained for shorter periods while systems stabilize.

8. Data Security

Host Guest uses Stripe Connect Express and AWS to handle all sensitive data through encrypted, PCI DSS-compliant channels. We employ industry-standard security measures, but no system is completely secure.

Users are responsible for maintaining strong passwords and safeguarding login credentials.

9. Your Rights

9.1 General Rights

Depending on your location, you may have the right to:

• Access a copy of your personal data.
• Request correction or deletion.
• Object to processing or request restriction.
• Withdraw consent (for optional services).
• Request portability of your data.

Requests may be submitted to legal@hostguest.net. Host Guest may require verification before processing requests.

9.2 California Residents (CCPA)

• You may request to know what personal information we collect and how we use it.
• You may request deletion of your personal data (subject to certain exceptions).
• You may opt out of data sharing for commercial purposes (though Host Guest does not sell personal data).

Requests can be made by contacting us at legal@hostguest.net.

10. International Data Transfers

Your information may be stored and processed in the United States and other countries where we operate. For users in the EU, we use safeguards such as Standard Contractual Clauses (SCCs) to ensure adequate protection.

11. Children's Privacy

Host Guest is intended for users 18 years and older. We do not knowingly collect data from minors. Accounts found to belong to users under 18 will be removed and data deleted.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If changes are material, we will notify users by email and/or a notice on the Platform. The revised version will include an updated "Effective Date."

13. Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy, please contact us at: