Privacy Policy

HostVista is a product of MantaVision Labs. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use HostVista ("the Service"). We are committed to transparency and respect your right to privacy.

Information We Collect

We collect the minimum amount of data needed to provide and improve the Service:

Account Information

• Email address (used for login and account communication)
• Name (optional, for personalization)
• Password (stored securely, never in plain text)

Guide Content

• Property details you provide (address, check-in info, house rules)
• Recommendations and places you add to your guides
• Images you upload for your properties

Usage Data

• Page views and interactions with your published guides
• General usage patterns to improve the Service

Analytics

We use Plausible Analytics, a privacy-friendly analytics platform. Plausible does not use cookies, does not collect personal data, and is fully compliant with GDPR, CCPA, and PECR. All analytics data is aggregated and cannot be used to identify individual users.

We also use PostHog for product analytics and session recording to help us understand how users interact with the Service and identify areas for improvement. PostHog data is processed on EU servers (eu.i.posthog.com). Session recordings automatically mask all text input fields to protect sensitive information. PostHog may set a cookie to distinguish unique visitors.

We use Sentry for error tracking and application monitoring. When an error occurs, Sentry may collect technical information such as browser type, operating system, and the sequence of actions leading to the error. This data is used solely for diagnosing and fixing bugs and is not used for marketing or advertising purposes.

You can opt out of PostHog tracking by enabling "Do Not Track" in your browser settings, which PostHog respects by default.

Data Storage

Your data is stored securely using Supabase, a trusted cloud database provider. Supabase uses PostgreSQL databases with row-level security policies to ensure your data is only accessible to you. Data is encrypted in transit (TLS) and at rest.

Payment Processing

When you subscribe to a paid plan, payments are processed by Stripe. We never store your credit card number, CVC, or full card details on our servers. Stripe handles all payment data in compliance with PCI DSS Level 1. We only store your Stripe customer ID and subscription status.

Third-Party Services

The Service integrates with the following third-party providers:

• Google Maps API — used to display maps and location data in your guest guides. Subject to Google's Privacy Policy.
• Supabase Auth — handles authentication and session management.
• Stripe — processes subscription payments (as described above).
• Plausible Analytics — privacy-friendly website analytics (as described above).
• PostHog — product analytics and session recording on EU servers (as described above).
• Sentry — error tracking and application monitoring (as described above).

Cookies

HostVista uses minimal cookies. The only cookies we set are strictly necessary for the Service to function:

• Authentication session — a Supabase auth token stored as a cookie to keep you logged in. This is a functional cookie and does not track you across websites.
• PostHog analytics — a cookie used by PostHog to distinguish unique visitors for product analytics. This cookie is not used for advertising or cross-site tracking.

We do not use advertising cookies or cross-site tracking cookies. Plausible Analytics operates without cookies entirely.

Your Rights

You have full control over your personal data. You may:

• Access your data at any time through your account dashboard.
• Export your guide data by contacting us.
• Delete your account and all associated data by contacting us. We will process deletion requests within 30 days.
• Correct any inaccurate information through your account settings.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data and guide content within 30 days. Aggregated, anonymized analytics data may be retained indefinitely as it cannot be linked to any individual.

Children's Privacy

HostVista is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

California Privacy Notice (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, contact us at hello@hostvista.app.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a notice on the Service. Your continued use of HostVista after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at hello@hostvista.app.