Privacy policy

Hospitappity LLC (“Hospitappity”, “we”), a Florida company, builds and runs apps and websites for local businesses. This policy covers hospitappity.com, the owner portal, and the information we hold about the businesses we work with and the people who use the portal.

It doesn't cover what a business collects from its own customers through the app or website we build for it. That information belongs to the business, and each business explains it in its own privacy policy, linked from its website and app. See section 4.

• Your sign-in details. The email address you sign in with, a password if you set one, and your name if you add it. Passwords are stored only in scrambled (hashed) form, never as you typed them.
• Your business and your team. Your business's name, contact details, locations, hours and everything you add in the portal, and the email addresses and roles of the team members you invite.
• Billing. Today we invoice you directly, so we keep who to bill, what we billed and what you've paid. If we start taking card payments online, a payment processor will hold your card details, never us, and we'll update this page before it starts.
• What you send us. Emails and messages you send us, so we can help you.
• Logs and error reports. Our providers keep standard technical logs (such as IP address, browser and the page requested) to keep the service secure and working. If something breaks, an error report describing what went wrong may be sent to Sentry.
• Visit counts. On hospitappity.com's public pages (not the portal, and not any business's website), Cloudflare Web Analytics counts visits: which pages are viewed, the site that sent you, and your browser, device type and country. It sets no cookies and builds no profile of you.
• Cookies. The portal uses cookies to keep you signed in, and two more to remember display choices (light or dark theme, and whether the menu is collapsed). The counter screen for stamping reward cards remembers its location in your browser. We use no advertising or analytics cookies, and visiting hospitappity.com without signing in sets none.

To run the service: sign you in, show your business's information on its app and website, send the emails the service needs (sign-in codes, invitations, alerts about new requests), support you, bill you, keep things secure, and meet our legal obligations.

We don't sell your information, we don't use it for advertising, and we don't put advertising trackers on hospitappity.com or the portal.

A business's app and website can collect information from its own customers: sign-ups for its email and text list, requests sent through its forms, reward cards, and notification settings. That information belongs to the business. We store and process it only on the business's behalf and on its instructions, to provide our service. We don't use it for our own purposes, we don't sell it, and we don't combine one business's customers with another's.

Each business's privacy policy is at /privacy on its website. If you're a customer of a business that uses Hospitappity, contact the business about your information. If you contact us instead, we'll pass your request to the business and help it respond. To delete a chat identity from a business's app, see how to delete your chat identity.

We use these service providers to run Hospitappity. Each may use information only to provide its service to us:

• Supabase. Our database, sign-in, file storage and server functions, hosted in the United States. Everything in the portal is stored here.
• Cloudflare. Runs hospitappity.com, the portal and every business website, manages domain names, protects against attacks, forwards email sent to our addresses, and counts visits to hospitappity.com's public pages (Cloudflare Web Analytics).
• Google (Gmail). Our email inbox: messages you send to a hospitappity.com address end up there.
• Resend. Sends our emails (sign-in codes, invitations, alerts) and the emails a business sends its own customers.
• Expo. Builds each business's app, and relays its push notifications to Apple and Google.
• Apple and Google. Publish each app in the App Store and Google Play, under the business's own developer accounts, and deliver its notifications.
• Sentry. Receives error reports when something breaks, once error reporting is switched on. Reports are set up to carry no IP address, email address or sign-in details.

Not in use yet: a provider for text messages (Twilio) and one for online card payments (Stripe). We'll add each one here before it handles anyone's information.

Otherwise, we share information only if the law requires it or to protect someone's safety. If Hospitappity is ever sold or merged, this policy will keep applying to the information that moves with it, and we'll tell you first.

We keep your account and business information while you're a customer. When you leave, you have 30 days to download everything; then we delete your business's information, including what it collected from its customers. Copies in backups are deleted as the backups expire. We keep invoices and payment records for as long as tax law requires.

Technical logs and error reports are kept for a short time, then deleted by our providers.

Everything travels over encrypted connections. Each business's information is walled off from every other business's in the database itself, not only in our code, and only the people a business invites can see it. No system is perfect: if a security problem ever affects your information, we'll tell you promptly and say what we're doing about it.

• See and correct it. Everything about your business is in the portal, and you can change it there any time.
• Take it with you. An owner can download everything (content, photos, sign-up lists and their consent records) from Settings in the portal, any time.
• Delete it. Email us to close your account or delete your information, and we'll confirm when it's done. A team member can be removed from a business in the portal.

Hospitappity is a service for businesses. It isn't meant for children, and we don't knowingly collect information from children under 13.

If we change what we collect or how we use it, we'll update this page and the date at the top, and email business owners about any significant change before it takes effect.

Questions, or a request about your information? Email hello@hospitappity.com. A person reads every message.