Privacy Policy

Data we collect

We process account data (name, email, company, address, timezone, language), the business data you enter (short-term rental properties, tariffs, reservations, guests, interventions, invoices), and technical logs required to operate and secure the service.

How long we keep your data

Business data is kept for as long as your account is active. When you request account deletion, your account is scheduled for permanent deletion after a 30-day grace period. Invoices and audit records are retained beyond that on a legitimate-interest and legal-obligation basis (accounting and fraud-prevention requirements) under your organization, separated from your personal login identity.

Your rights

Cookies

HostCal uses only strictly necessary cookies to keep you signed in securely and to protect the service. We do not use tracking or advertising cookies and we do not run third-party analytics, so no cookie-consent banner is required.

Platform synchronisation

When you enable platform synchronisation (“Synchronisation avec les plateformes”), HostCal exchanges availability and reservation data with the booking channels you connect (such as your listing platforms) to keep your calendar accurate. Only the data needed to synchronize bookings is shared, and only for the channels you connect.

Automatic document processing

When you upload a supplier invoice, HostCal may process the document automatically to extract invoice data (supplier, dates, amounts, category) and pre-fill the validation form. You always review and confirm the data before it is saved. Extracted documents remain under your organization and are retained with the invoice record.

Subprocessors

To provide the Service, HostCal relies on the subprocessors below, each for one purpose and nothing else. This is the complete list of services that can see your data or your guests' data.

• Google Cloud / Firebase

  Hosting, database, authentication, file storage and scheduled jobs. This is where your account and all of your business data live.

  Data location European Union — europe-west1 (Belgium), with the application backend in europe-west4 (Netherlands).

• Channex.io LTD (United Kingdom)

  Platform synchronisation. Exchanges availability, rates and reservations — including guest names and stay details — with the booking channels you connect.

  Data location European Union. Channex is a UK company; the United Kingdom benefits from a European Commission adequacy decision.

• Paddle

  Merchant of record for subscriptions: takes payment, issues your invoice, processes refunds and handles payment-related support. Paddle receives your billing identity and payment details; we never see your card number.

  Data location United Kingdom and European Union, with transfers covered by standard contractual clauses.

• Anthropic

  Automatic reading of the supplier invoices you upload, so the validation form can be pre-filled. The document is sent to the model, which returns the extracted fields; it is not used to train models.

  Data location United States.

• Resend

  Delivery of transactional email: invitations, alerts, payment notices and reports. Receives the recipient address and the content of the message.

  Data location United States. Mail is dispatched from Ireland, but Resend stores message content and delivery logs in the United States.

• Sentry

  Error tracking, so we can find and fix failures. Events are sent without your email address, IP address, cookies or request bodies.

  Data location European Union — Frankfurt region.

HostCal sends no SMS and uses no advertising network, analytics provider or session-recording tool. Nothing on this list profiles you.

Transfers to the United States (Anthropic, Resend) are governed by standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. This list may change as the Service evolves; we announce material changes in the application before they take effect.

Publisher & complaints

This service is published by HOSTCAL, a French simplified joint-stock company (SAS) with share capital of €1,000. Registered office: 683 Route de Montjean – Propriété Poppy, 97133 Saint-Barthélemy. RCS Basse-Terre: registration in progress. Publication director: Charles Boudre, President. Contact: legal@hostcal.ai. For any privacy request or question, you can also write to privacy@hostcal.ai. The Service is hosted by Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland, telephone +353 1 543 1000. Our full legal notice is published on the Legal notice page. If you are in the EU, you also have the right to lodge a complaint with your local data-protection authority (in France, the CNIL).