Privacy Policy
1. Introduction
Hospara ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered property operations platform ("Service"). By using the Service, you consent to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, phone number
- Property information: hotel or property name, number of rooms, location
- Payment information: billing details processed through our secure payment provider (we do not store credit card numbers directly)
- Communications: messages you send us via email or support channels
- Configuration data: your agent settings, approval rules, response templates, and operational preferences
2.2 Information from Integrations
When you connect third-party services (such as Hostaway, SiteMinder, Booking.com, Airbnb, or Google), we access data necessary to provide the Service, including reservation and booking data, guest contact information and communication history, rate and availability information, review and rating data, and financial and billing data from your property management systems.
2.3 Information Collected Automatically
- Usage data: how you interact with the Service, features used, agent actions taken
- Device and browser information: IP address, browser type, operating system
- Log data: access times, pages viewed, error reports
3. How We Use Your Information
We use your information to provide, operate, and improve the Service; process AI agent actions on your behalf (rate adjustments, guest communications, housekeeping coordination, and similar); generate reports, analytics, and operational insights for your property; send you daily briefings, agent notifications, and operational alerts; process payments and manage your subscription; provide customer support; send important service updates and security notices; and improve our AI models and algorithms using anonymized, aggregated data only.
We do NOT use your information to sell or rent your data to third parties, send you marketing from other companies, build advertising profiles, or share your property's competitive data with other Hospara customers.
4. Data Sharing
We only share your information in these limited circumstances:
4.1 Third-Party Integrations
When you authorize connections to third-party services, we exchange data as needed to perform agent actions (for example, updating rates on Booking.com or responding to reviews on Google).
4.2 Service Providers
We use trusted service providers for hosting, payment processing, email delivery, and analytics. These providers are contractually bound to protect your data and use it only for the services they provide to us.
4.3 Legal Requirements
We may disclose information if required by law, legal process, or government request, or to protect our rights, safety, or property.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
5. Data Security
We implement industry-standard security measures including encryption in transit using TLS 1.3, encryption at rest using AES-256, property-level data isolation, regular security audits and vulnerability assessments, access controls and authentication requirements, and SOC 2 compliance (in progress). While we take extensive measures to protect your data, no system is 100% secure. We encourage you to use strong passwords and protect your account credentials.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your account, we will make your data available for export for 30 days; after 30 days we will delete your data from our active systems; backups may be retained for up to 90 days before being permanently deleted; and we may retain anonymized, aggregated data indefinitely for analytics and improvement.
7. Your Rights
Depending on your location, you may have the right to access a copy of the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); request your data in a machine-readable format; object to certain processing of your data; and request that we limit how we use your data. To exercise any of these rights, contact us at hello@hospara.com. We will respond within 30 days.
8. International Data Transfers
Our servers are located in secure cloud infrastructure. If you are located outside Indonesia, your data may be transferred to and processed in countries with different data protection laws. We ensure appropriate safeguards are in place for all international transfers.
9. Cookies and Tracking
Our website uses essential cookies to maintain your session and preferences. We do not use advertising or tracking cookies. We use basic analytics to understand how our website is used, but this data is anonymized and not linked to your personal information.
10. Guest Data
When our AI agents handle guest communications, reservations, or reviews on your behalf, we process guest personal data as a data processor acting on your instructions. You remain the data controller for your guests' information. You are responsible for ensuring your use of the Service complies with applicable privacy laws regarding your guests' data.
11. Children's Privacy
The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or your personal data: hello@hospara.com · Hospara, Bali, Indonesia