HostPTO Privacy Policy
Effective date: October 17, 2026
Last updated: October 19, 2026
Hi. Here is how HostPTO handles your information.
HostPTO helps short term rental hosts run their turnovers: the cleans between guests, the people who do them, and the repairs and supplies that come up along the way. To do that, we need some information about hosts, about the cleaners and contractors hosts work with, and about the homes themselves.
We wrote this page to be read, not skimmed past. The short version:
- We collect what we need to run turnovers, and not much else.
- We do not sell your information, we do not show ads, and we do not use tracking or analytics tools that follow you around the internet.
- We never share phone numbers with anyone for their marketing.
- Cleaners are never scored, ranked or compared. A cleaner's other hosts stay private.
- HostPTO never texts or messages your guests.
- Hosts can download their data and close their account themselves. Anyone else can ask us to delete their information at any time.
When this policy says "HostPTO", "we" or "us", it means HostPTO LLC, a California limited liability company.
1. What this policy covers
This policy covers the HostPTO web app at https://www.hostpto.com, the private links we send to cleaners and contractors, our text messages and notifications, our Contact and Delete my data pages, and anything else that links to this policy.
It covers everyone whose information passes through HostPTO:
- Hosts: people who sign up to manage one or more rental homes.
- Cleaners, cleaning companies, contractors and other service people (together, "team members"). Team members can use HostPTO through a private link provided by the host they work with, without creating an account. Cleaners can also create a login for ongoing access across the hosts they work with.
- People who visit our pages, join our waitlist or contact us.
- Guests of our hosts, in the limited way described in section 2.4.
HostPTO is currently in a private beta. Beta hosts also accept a separate Private Beta Agreement, which works alongside this policy.
HostPTO does not have iPhone or Android apps yet. When we release them, we will update this policy before release to describe anything the apps do differently, such as using your phone's camera or sending notifications through Apple or Google.
2. What we collect
2.1 From hosts
- Account details: your email address and password. Your password is handled by our sign in provider and stored only in scrambled (hashed) form. We never see it. You can also add your name, a phone number (so we can text you when nobody can take a clean) and a profile photo.
- Your homes: the name you give each home, its town or ZIP code, and, if you add it, its street address.
- Listing details: when you paste an Airbnb listing link, we read that public listing page and keep what helps with turnovers, such as the listing title, description, house rules, checkout and check in times, the number of bedrooms and bathrooms, links to the listing's photos and their captions, and the approximate map location Airbnb shows publicly.
- Calendar links and reservations: the calendar (iCal) links you connect from Airbnb, Vrbo, Booking.com, Expedia or another calendar, and the reservations they contain. See section 2.4 for exactly what that includes.
- House instructions: what you add so your team can do the work, such as how to get in (door or lockbox codes and an entry photo) and trash day, plus any other house notes you have added. Please treat entry details like keys.
- Your team: the names and mobile numbers of the cleaners and contractors you add, which homes they work at, the order you want cleaners asked, the rate you agreed with each person, their preferred language, and any Venmo or Zelle name they share for payment.
- Work records: turnovers, who was offered each clean and how they answered, when a clean started and finished, photos and short videos taken during cleans and repairs, reference photos of how each room should look, repair reports and their estimated and actual costs, contractor prices and dates, supply requests, and whether you marked a payment as paid (with the amount, date and method you record).
- Messages: the messages you exchange in the app with your team members (see section 8).
- Reports and blocks: private reports you file after a job (for example, a no show) and any report or block you place on a message thread.
- Your settings and requests: notification choices, how you heard about HostPTO, beta feedback, survey answers, and anything you send us through Ask for something, the Contact page or email.
- Agreement records: when you accept our Private Beta Agreement (and, in future, these terms and this policy), we record which version you accepted, a fingerprint of the exact words, the time, your email address at that time, and, when available, your internet (IP) address and browser type. This is our proof that you agreed.
HostPTO does not collect or store card or bank numbers. We do not process payments today (see section 3).
2.2 From cleaners, contractors and other team members
Your host gives us your name and mobile number so HostPTO can text you about work at their homes, along with the rate they agreed with you. After that, we collect:
- Your answers to offers (yes, no, or no answer) and, for contractors, the price and day you propose for a repair.
- When you start and finish a clean. We show these times as they happen. We never turn them into scores, averages or rankings.
- Photos and videos you take at the home, and any problem, repair or supply notes you send.
- Messages you exchange with your host in the app, and any report or block you place.
- Things you choose to add on your own page: your preferred language, a profile photo, and a Venmo or Zelle name so your host can pay you.
- If you sign up yourself on our For cleaners page: your first name and preferred language, and your phone number, which we keep only as a scrambled key (see below) so your host can be matched to you later.
- If you choose to create a login: the email and password you sign in with, or your phone number and a one time code we text you. Codes are stored only in scrambled form and expire after ten minutes.
- Feedback and survey answers you send us.
- If you previously signed up to help other hosts nearby through a feature that is currently turned off, or if you signed up as a cleaning company or contractor, we may also have the general area you work in, how far you are willing to travel, when you agreed to join, and, for businesses, your business name and trade. We keep this information for the service you originally signed up for and do not expose it to hosts you do not already work with while that feature is off.
To recognize the same person when two hosts add the same phone number, we keep a scrambled version of the number (a keyed hash) in a shared table, never the number itself. When a match is found, you are asked on your own link before anything is linked.
2.3 From visitors and people who contact us
- Contact page and Ask for something: your name, email address and message.
- Waitlist: your name, email address and how you heard about us.
- Delete my data requests: who you are (host, cleaner, contractor or not sure), your name if you give it, how to reach you, and your note.
2.4 About guests
HostPTO is not a guest facing product and does not try to collect guest information. Calendar feeds from booking platforms mostly contain dates. From each reservation we keep:
- The check in and checkout dates.
- The platform's reservation identifier and, for Airbnb, the link to that reservation in your Airbnb account, so you can open the right conversation in one tap.
- Which calendar the reservation came from.
We do not store guest names, phone numbers or email addresses from calendar feeds. Reservation dates are dropped automatically 24 months after checkout, each time a calendar refreshes.
When a guest asks about an early check in, HostPTO may draft a message for you. You send it yourself from the booking platform. HostPTO never texts, emails or messages guests.
Team members should photograph the home and the work only, never guests or guests' belongings. If that happens by accident, the photo can be deleted.
2.5 Collected automatically
- Server logs: like almost every website, our hosting provider records basic technical information when your browser talks to HostPTO, such as IP address, browser type, the page requested, the time, and errors. We use this to keep HostPTO running and secure.
- Cookies: we use a small number of cookies that are needed to keep you signed in, to bring you back to your own page, and to protect the app. If you are a cleaner, one of them keeps your private link on your own device so a saved Home Screen icon opens your page. We do not use advertising cookies, analytics cookies or cross site tracking.
- Storage on your device: the app keeps a few things in your own browser, such as photos a cleaner has taken that are waiting to upload when the signal is weak, and whether you have dismissed a card. These stay on your device.
- Push notifications: if you turn on notifications, your browser gives us a notification address and keys so we can send alerts to that device. Turning notifications off in your browser or phone settings stops them.
We do not use third party analytics, advertising or tracking tools.
3. Money
HostPTO does not move money today.
- Hosts pay their team directly. HostPTO can open a Venmo payment with the amount filled in, or show a Zelle name to copy into your own bank's app. The payment itself happens in Venmo or your bank, under their terms. HostPTO keeps the record you create when you mark something as paid, and shows yearly totals for your convenience.
- HostPTO does not charge hosts during the private beta. HostPTO does not deduct fees from the compensation a cleaner or contractor agreed to receive for their work.
- Payment processing through HostPTO and paid plans are not turned on. If we turn either on, payment details will be entered into secure payment fields provided by Stripe and transmitted directly to Stripe. HostPTO will not receive or store full card or bank account numbers. We will keep only the Stripe references and payment records needed to provide the service. We will update this policy first and tell you before anything changes.
4. How we use information
- To run HostPTO: read your listing and calendars, create turnovers, offer cleans to your team in the order you set, send texts and notifications, collect photos, route repairs to contractors, and show you what needs your attention.
- To support in app messaging between hosts and their team, including text alerts about new messages.
- To keep records you and your team can rely on, including what was done, when, and what was marked as paid.
- To keep HostPTO safe: protect accounts, prevent misuse, act on reports and blocks, and keep each host's information separate from every other host's.
- To answer you: support requests, deletion requests and feedback. During the private beta, the HostPTO team may read your feedback and follow up with you.
- To improve HostPTO, using feedback and survey answers. Survey answers are stored against a scrambled identifier, not your name.
- To meet legal duties and enforce our Terms of Service.
- To operate, support and fix HostPTO. When we investigate a problem or provide support, authorized HostPTO personnel and service providers we use to help operate the service, including AI assisted tools, may process the account information reasonably necessary to investigate and resolve the issue. We use that access only to operate, secure, support and improve HostPTO, not for advertising.
We do not use anyone's information for advertising. We do not score, rank or compare cleaners, and we do not build profiles of cleaners for hosts who have not added them.
5. How we use AI
HostPTO uses AI services in two ways: inside the app, and to help us run and support HostPTO.
5.1 Inside the app
HostPTO uses Anthropic's Claude AI service for two specific jobs:
- A photo check for cleaners. When a cleaner takes a photo of a finished room, we may send that photo and the reference photo for that room to Anthropic, to point out anything that looks clearly unfinished (like a bag left on a counter). The note is shown only to the cleaner, who can retake the photo or keep it. The note is not saved, and it is never shown to the host.
- Sorting repairs. When someone reports a problem at a home, or a host turns a team member's message into a repair, we send the words of that report and the home's town to Anthropic to suggest what kind of repair it is and a rough cost range. The suggestion is saved with the repair, and the host sees it as an estimate, not a quote.
We do not send names, phone numbers, email addresses, street addresses or entry codes to these features. A report or a photo can still contain whatever the person chose to write or photograph.
5.2 Running and supporting HostPTO
As described in section 4, we use AI assisted tools to help operate, support and fix HostPTO:
- Anthropic (Claude): when we investigate a problem or handle a support request, the account information reasonably necessary for that issue may be processed by Anthropic's Claude.
- OpenAI (ChatGPT): messages sent to our support email address, including privacy and deletion requests, may be processed by OpenAI's ChatGPT to help us notice them and respond on time.
These providers process this information to provide their service to us. AI assisted tools may help us identify, organize and investigate support, privacy and deletion requests, but they do not independently make final decisions on privacy or deletion requests or take irreversible account actions. AI can be wrong, so please use your own judgment with any AI note or estimate.
6. Who we share information with
We do not sell personal information and we do not share it for advertising.
We share information only in these ways:
- Between a host and their own team, as needed for the work. A team member sees what they need for a job at that host's home, such as the home's name, where it is, the dates, how to get in, the rate and messages with that host. A host sees their own team members' names, numbers, answers, photos, messages and payment records.
- Never across hosts. One host never sees a team member's other hosts, rates, messages or reports.
- Service and infrastructure providers we use to operate HostPTO. They receive information as needed for the functions described below:
- Supabase: our database, sign in, and private photo storage. It holds the information described in section 2.
- Railway: app hosting. Requests to HostPTO's server and information processed by the server pass through Railway. Railway also stores a small number of older photos on the server's disk (section 10 item 3) and keeps technical server logs (section 9).
- Resend: sends account emails, such as password resets and sign in confirmations. It receives your email address and the content of those emails.
- Twilio: sending text messages. It receives the phone number and the text itself, which can include first names, the home's name, dates, the rate, a private link, and the words of a message sent in the app.
- Anthropic: the AI uses described in section 5 (the photo check, repair sorting, and help investigating problems and support requests).
- OpenAI: the support email monitoring described in section 5. It can see messages sent to our support address, including privacy and deletion requests.
- Google Workspace: our business email inbox, where messages sent to our support address are stored.
- Google Fonts: the app loads its typefaces from Google, so your browser connects to Google when a page opens. Google receives your internet (IP) address and browser details, not your account information.
- GitHub: where we build HostPTO and track work. When we fix a problem, a work note can include limited details such as a first name, a home's name or a date. We keep these notes to what is needed to fix the problem.
- Browser push services (such as Apple, Google, Microsoft or Mozilla, depending on your device): delivering notifications you turned on. The contents of each notification are encrypted so the push service cannot read them.
- OpenStreetMap Nominatim and Zippopotam.us: turning a town name or ZIP code into a map location. We send only the town, ZIP or other location information you type, never your name.
- Services you open yourself, or that show you their content. Home photos imported from Airbnb are shown directly from Airbnb's servers, so your browser connects to Airbnb when a page shows one. Tapping a map link opens Google Maps with the address or town. Tapping a payment link opens Venmo with the amount and a short note. Tapping a supply link opens Amazon. Tapping a find help link opens Thumbtack with the kind of job and the town. Those services handle what you do there under their own privacy policies. HostPTO reads public listing pages and calendar feeds from booking platforms, but does not send them your information.
- Legal and safety reasons: when required by law or valid legal process, or when needed to protect someone's safety, our users or HostPTO.
- Business changes: if HostPTO is merged, sold or reorganized, information may move to the new owner, who must keep honoring this policy.
- With your permission, for anything else.
Our text messaging promise: we do not sell, rent or share mobile phone numbers or text messaging consent with third parties or affiliates for their marketing or promotional purposes. To deliver HostPTO texts, mobile numbers and message content may be processed by Twilio and the telecommunications providers needed to deliver the message.
Amazon: some supply suggestions link to Amazon. The link puts the item in your own Amazon cart. HostPTO never places an order or sees what you buy.
7. Text messages
HostPTO sends texts about work. We do not send marketing texts.
The texts we send include:
- To cleaners: offers of cleans and reminders to answer, same day and arrival reminders, notice when a clean is called off, moved or assigned to you, payment notices, invitations from a host to join their team, links to your own page, sign in codes, and new messages from your host.
- To contractors and service companies: repair and service requests, and whether you got the job.
- To hosts: alerts that need your attention, such as nobody being able to take a clean, a clean not started, a new booking, a home ready early, and new messages from your team.
How texting works:
- Hosts add their team members' numbers and agree to tell them HostPTO will text them. Every text starts with "HostPTO" and says how to stop texts.
- Message frequency varies with bookings, repairs and messages.
- Message and data rates may apply.
- Reply STOP to any text to stop receiving texts. Reply START to begin again. Reply HELP for help, or email support@hostpto.com.
- Texts to cleaners and contractors are held between 9pm and 8am local time for the home, and sent at 8am instead. There are two exceptions: a clean happening today that nobody has taken yet, and a repair the host marks as an emergency that cannot wait until morning. Before sending, the host is told that an emergency request will go out right away. A sign in code you ask for is sent right away. We never text about a clean whose date has passed.
- Texts to cleaners can be in English or Spanish, based on the language the cleaner chose. Other texts are in English.
- Hosts can turn off their own text alerts in the app: Account, then Notifications, then Text messages.
Stopping texts means you may miss offers. Your host can still reach you directly.
8. Messages, reports and blocks
- Messages you send in the app are stored with that host's account so the conversation is there next time you open it. Each conversation is between one host and one cleaner or contractor, and in the app only those two people can see it.
- When a new message arrives, the other person may get a text, and a notification if they turned notifications on, with the first part of the latest message (up to 90 characters) and a link. Messages sent close together are grouped into one alert, so it can arrive a few minutes after the message was sent. The full message is only shown in the app.
- Anyone in a conversation can report it (as inappropriate or unsafe, harassing or threatening, or something else, with an optional note) and can block it. Reporting a conversation also blocks it. A block stops new messages in both directions, and only the person who placed it can lift it. A report is private: it is never shown to the other person and never made public.
- After a job, a host can privately report a no show, an incomplete clean, or something else. The cleaner or contractor gets a text saying a host reported an issue and which kind, but not which host or home. Reports are never shown as a score or rating and never shown to other hosts. Reports do have two effects, each for 12 months after the report was filed: the host who filed a report is not offered that person through Backup Cover, and a person reported by two different hosts within 12 months is paused from Backup Cover and from the nearby companies HostPTO suggests to hosts. Backup Cover is currently turned off. A person's direct work with hosts who added them is never affected.
- HostPTO receives and surfaces reports for review. Authorized HostPTO personnel may review a report and the messages involved when needed to address safety, misuse or violations of our Terms.
9. How long we keep information
We keep information only as long as we need it for the reasons in this policy. When a period ends, we delete the information or remove anything that identifies you, where that is reasonably possible.
- Host account and home information: while your account is open. When a host closes their account, the information listed in section 10 item 3 is deleted right away, except as described in items 7 to 9 and 11 to 13 below.
- Photos taken during cleans and repairs, reference photos and entry photos: kept while the host's account is open, or until you remove them, and deleted when the account closes. Profile photos: a host's profile photo is deleted when the host replaces or removes it, and when the account closes. A cleaner's profile photo is the cleaner's own and is shared with each host they work with. It is deleted when the cleaner replaces or removes it, when the cleaner is removed at their request, and when the last host that lists them removes them or closes their account. It is kept while another host still lists them.
- Turnover history (cleans, who was offered what, answers, notes and similar details): kept while the host's account is open, and deleted when the account closes.
- Reservation dates from calendar feeds: dropped automatically 24 months after checkout, and deleted when the account closes.
- Payment records you create (amounts, dates, who was paid and how): kept while the host's account is open, and deleted when the account closes. If you need them for your own records, download a copy first (see section 10).
- Messages, message reports and blocks: kept with the host's account while it is open, and deleted when it closes.
- Reports a host files after a job: kept in a separate list that HostPTO uses for the decisions in section 8 item 4. Each report holds an identifier for the reporting host's account, the person it is about, the type of report, the job and the home it was about, any note the host wrote, its date, and whether HostPTO dismissed it after review. These reports are not deleted when the reporting host closes their account, and they are not deleted automatically: they are kept until they are deleted on request. A report still counts toward the decisions in section 8 item 4 for 12 months after it was filed, even after the reporting host closes their account. Reports about a cleaner or contractor are deleted when that person is removed at their request (item 10). HostPTO also keeps a separate record of when a pause starts or ends and of each dismissal, with the reason written for it; that record is not deleted.
- Agreement records: for as long as the agreement could matter legally, including after an account is closed.
- Feedback, contact messages, waitlist sign ups and deletion requests: for as long as we need them to answer and follow up, and to keep a record that we did. Survey answers are kept against a scrambled identifier, not a name.
- When a cleaner or contractor is removed at their request: their conversations, their sign in details, their private link and their profile photo are deleted, and each host's records of work that was already paid are kept with the name replaced by "Removed cleaner" or "Removed contractor", so hosts' payment history stays accurate.
- A team member's own link and their work for other hosts are theirs, and are not deleted when one host leaves.
- Backups: our database provider makes one backup of the database each day and keeps it for about a week, so information deleted from the database can remain in those backups for up to 8 days before it is gone. Photos are not included in these backups.
- Server logs: our hosting provider keeps technical server logs for up to 30 days. They record each request to HostPTO, including the page or link address opened (which can include a private link), the time, and the visitor's internet (IP) address and browser details. We use them only to run and secure HostPTO.
Automatic deletion of older photos and turnover history is built but not turned on. We will update this policy before it starts.
Information we sent to service providers to operate HostPTO (section 6), such as text messages delivered through Twilio or emails in our support inbox, is kept by those providers under their own retention practices, even after it is deleted from HostPTO.
We may keep specific information longer when that is reasonably necessary for an active dispute or claim, a fraud or security investigation, a legal obligation, or a payment dispute. When that reason ends, the normal schedule applies again.
10. Your choices and rights
- See and fix your information. Hosts can view and edit most details in the app. Cleaners can change their language, photo and payment name on their own page, and contractors can change their payment details on theirs. When you replace or remove a profile photo, the old photo file is deleted. Anyone can email us at support@hostpto.com to see or correct their information.
- Download your data. Hosts can download a copy of their homes, cleans, team list, messages, repairs, payment records and settings as a file: in the app, go to Account, then Your data, then Download your data. The file lists your photos but does not contain the photo files. For safety, it leaves out your team members' private links and any report someone filed about you. For anything else we hold about you, such as your account email and phone number or your agreement records, email us.
- Close your account (hosts). In the app, go to Account, then Close Your Account. The app shows exactly what will be deleted and asks you to type the word delete. The only condition: if the app shows that you still owe a cleaner or contractor for completed work, you mark those as paid first, because money owed does not disappear when an account closes. Closing right away deletes your homes, cleans, team list, payment records, messages and settings, deletes your photos, including older copies on our hosting server, and deletes your login. Copies in our database backups are gone within 8 days, and server logs within 30 days (section 9 items 12 and 13). We keep only the records described in section 9 items 7, 8 and 9, which include the reports you filed after a job.
- What closing does not delete. A cleaner's own link and their work for other hosts are theirs, and are not deleted when one host leaves. What goes is that host's copy of their details. A contractor's link for that host stops working when the host closes; their work for other hosts is not affected.
- Delete my data (anyone). Cleaners can tap Delete my info on their own page. Anyone, including people without an account or the app, can use our Delete my data page at https://www.hostpto.com/delete-my-data or email support@hostpto.com. A person at HostPTO reads and reviews each request, checking first so we do not delete something you still need (such as money you are still owed). We will tell you what we deleted, and explain anything we must keep and why.
- Stop texts at any time by replying STOP. Turn off push notifications in your browser or phone settings.
We will not treat you differently for using any of these choices. We may need to confirm who you are before acting on a request, usually by contacting you at the email or phone number we have on file. We will confirm that we received your request within 10 business days, and give you our full response within 45 calendar days of receiving it. You may use an authorized agent if you give them written permission.
11. California privacy notice
HostPTO is a small company based in California. We follow the standards of California's consumer privacy law (the California Consumer Privacy Act) voluntarily, and we give the rights below to everyone who uses HostPTO, wherever they live.
- Categories we collect: identifiers (name, email, phone number, a home's street address, IP address), customer records (account details, and payment names such as a Venmo or Zelle username), commercial information (turnover and payment records you create), internet activity (server logs), geolocation (home locations, towns and service areas you give us or that come from a listing), audio or visual information (photos and videos), and professional information (a team member's trade and work area).
- Sensitive information: account sign in details and private link codes that provide access to a private HostPTO account or page; the contents of messages between hosts and their team; and any precise location information that may be contained in uploaded photos before HostPTO removes that hidden metadata. We use sensitive information only to provide, secure and support HostPTO, and we do not use it to infer characteristics about you.
- Sources: you, your host or team, public listing pages, calendar feeds, and our service providers.
- Purposes: the uses in sections 4 and 5. How long we keep each kind of information: section 9.
- Disclosures: the recipients in section 6. In the past 12 months we have not sold personal information or shared it for cross context behavioral advertising, and we do not knowingly sell or share information of anyone under 16.
- Your rights: to know what we collect, use and disclose and to get a copy, to correct it, to delete it, to opt out of sale or sharing (we do neither), to limit use of sensitive information (we already limit it), and not to be treated differently for using these rights. Section 10 explains how to use them, how we may confirm who you are, and how quickly we respond.
- Do Not Track and Global Privacy Control: we do not track you across websites and do not sell or share information for advertising, so there is nothing for these signals to switch off. If that ever changes, we will honor a Global Privacy Control signal as a request to opt out before it starts.
- Other companies' tracking: HostPTO has no advertising or analytics trackers, and we do not allow other companies to track your activity on HostPTO across other websites. HostPTO's pages load fonts from Google, and some pages load listing photos directly from Airbnb, so those companies receive your IP address and browser details when they load (section 6).
- "Shine the Light": we do not share personal information with third parties for their own direct marketing.
To use these rights, see section 10 or contact us as described in section 17.
People in other US states with privacy laws, including Oregon, can make the same requests the same way. If we turn down a request, you can ask us to reconsider by replying to our answer.
12. Security
We use reasonable safeguards to protect information, including:
- Encryption in transit: HostPTO's pages, and our connections to our service providers, use HTTPS.
- Separation between hosts: access rules in our database and in our app keep each host's information separate from other hosts' information.
- Private photo storage: photos are kept in private storage and are shown only through HostPTO's own servers, after a check that the person asking is allowed to see them.
- Sign in: passwords for host and team member logins are handled by our sign in provider and stored only in scrambled (hashed) form; HostPTO never sees or stores them. Text message login codes are stored in scrambled form, expire after 10 minutes, and stop working after 5 wrong tries.
- Private links: each cleaner and contractor link contains a long random code that works like a key. Anyone who has the link can open that page, so keep yours private, and tell your host or us if it gets out.
- Limited access: access to HostPTO's production systems and operator tools is limited to HostPTO's founder and the automated and AI assisted tools she authorizes to build and run HostPTO (section 5).
No system is perfectly secure, and we cannot promise that information will never be accessed without permission. If a security breach affects your information, we will tell you as the law requires.
13. Children
HostPTO is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you think a child's information is in HostPTO, contact us and we will delete it, following the steps in section 10.
14. Where information is stored
HostPTO is offered in the United States. Our main database and photo storage are hosted by Supabase in Canada (Central Canada region). Our app runs on Railway in the United States (California), and a small number of older photos are stored on that server's disk. Account emails are sent through Resend in the United States. Other service providers, such as OpenStreetMap Nominatim, browser push services and Google's font servers, may process information in the United States or other countries. Information stored in Canada is protected by the same safeguards described here, and may be subject to Canadian law.
15. Changes to this policy
If we change this policy, we will post the new version at https://www.hostpto.com/privacy and update the date at the top. If a change is significant, we will tell hosts by email before it takes effect. If a significant change affects how we collect, use or share a team member's information, we will also give that person appropriate notice. If a change would let us use information we already hold in a significantly different way than we described when we collected it, we will ask for your permission first.
16. Links and other services
HostPTO links to services we do not control, such as Airbnb and other booking platforms, Google Maps, Venmo, Amazon and Thumbtack. Their own privacy policies apply to what you do there.
17. Contact us
HostPTO LLC
Privacy questions and requests: support@hostpto.com
Help: support@hostpto.com
Delete my data: https://www.hostpto.com/delete-my-data