Privacy Policy

Effective Date: April 9, 2026 · Last Updated: April 9, 2026

    Short version: CoHostOS collects only what it needs to run your property management business. We don't sell your data. We don't share it with advertisers. You own your data and can delete it at any time.
  

1. Who We Are

CoHostOS ("we," "our," or "us") is a property management platform operated at cohostos.co. We provide iOS, macOS, and web-based tools for short-term rental hosts, co-hosts, property managers, and landlords.

Contact: hello@cohostos.co

2. What We Collect

Information you provide

Account information: Name, email address, business name, billing information
Property data: Property names, addresses, booking information, revenue figures, expenses
Tenant & owner information: Names, email addresses, phone numbers, lease terms — entered by you to manage your portfolio
Communications: Messages you send through the app to owners, tenants, or service providers
Settings & preferences: App configuration, integration API keys you choose to connect

Information collected automatically

Device type and operating system version
App usage analytics (screens viewed, features used) — aggregated and anonymized
Error logs and crash reports to improve app stability

Information we do NOT collect

We do not collect or store full credit card numbers (handled by Stripe)
We do not collect location data
We do not read iCal content beyond booking metadata you import

3. How We Use Your Information

To provide, operate, and improve the CoHostOS platform
To process payments and manage your subscription
To send transactional emails (statements, invites, rent reminders) on your behalf
To provide customer support
To detect and prevent fraud and abuse
To comply with legal obligations

We do not use your data to train AI models, sell to third parties, or target you with advertising.

4. Data Sharing

We share your data only with:

Supabase — our database and storage provider (data stored in US-East-1)
Stripe — payment processing (subject to Stripe's privacy policy)
Resend — transactional email delivery
Twilio — SMS messaging (if you configure it)
Vercel — web hosting
Law enforcement — only when required by valid legal process

All service providers are bound by data processing agreements. We do not sell your personal information.

5. Your Rights

Access: Request a copy of all data we hold about you
Correction: Update inaccurate information
Deletion: Request deletion of your account and all associated data
Export: Export your data in CSV format from within the app at any time
Portability: Receive your data in a machine-readable format

To exercise any of these rights, email hello@cohostos.co. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we delete your personal data within 30 days, except where retention is required by law (e.g., financial records).

7. Security

We use industry-standard security practices including TLS encryption in transit, encrypted storage at rest, and access controls. However, no system is perfectly secure. Please use a strong, unique password and enable two-factor authentication where available.

8. Children's Privacy

CoHostOS is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately.

9. International Transfers

CoHostOS is operated from the United States. If you access our services from outside the US, your data may be transferred to and processed in the US, where data protection laws may differ from your country.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by email or in-app notification. Your continued use of CoHostOS after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at hello@cohostos.co.