Privacy policy

This policy explains what personal data HostBoost collects, why, and what rights you have. It follows the General Data Protection Regulation (GDPR) and Spanish data protection law. You must be at least 18 years old to give us personal data.

1. Data controller

Rental Ninja, S.L. (tax ID B67572370), C/ Sant Pere Més Alt 66, Local 1, 08003 Barcelona, Spain. Contact for privacy matters: [email protected], or by post at the address above.

2. Data we collect

• Account data: email address, password (stored hashed), preferred language.
• Order data: the Airbnb listing URL you submit, the report we produce, and the billing name, address, and VAT number you enter at checkout.
• Payment data: processed by Stripe. We never see or store card numbers.
• Listing data: public content of the listing you submit, including photos, texts, reviews, and the host's public name and profile, as anyone can see it on Airbnb.
• Technical data: IP address, browser, and error logs needed to run and secure the service.

The data marked as account and order data is needed to deliver the report. Without it we cannot take your order. Keep your data accurate and tell us about changes.

3. Why we process it

• To deliver the report you ordered (performance of a contract).
• To invoice and keep accounting records (legal obligation).
• To answer your messages and run the specialist call (performance of a contract).
• To review the public listing, including the host's public profile (legitimate interest in providing the service you ordered).
• To keep the service secure and fix errors (legitimate interest).

We do not sell personal data and we do not use it for advertising. We send only emails needed for the service, such as order and delivery notices.

4. Who receives it

Our staff sees your data only to run the service. We share data only with providers that help us run it, under data processing agreements:

• Stripe for payments and invoices.
• Hetzner (Germany) for hosting the application and the browsers that read the public listing.
• Cloudflare for file storage of report PDFs and listing images, network security, and transactional email delivery.
• OpenRouter and the language-model providers it routes to for drafting parts of the report from the public listing content. Only listing content is sent to them; no account or payment data.
• Sentry for error monitoring.

Some providers process data in the United States under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We disclose data to authorities only when the law requires it.

5. How long we keep it

• Account and report data: while your account exists, then deleted within 30 days of your deletion request.
• Invoices and accounting records: the period required by Spanish tax law, currently six years.
• Error logs: 90 days.

6. Your rights

You can ask us to access, correct, delete, or export your data, to restrict or object to processing, and to withdraw consent where processing relies on it. Withdrawing consent does not affect earlier processing. Write to [email protected] with "Personal data" in the subject and say which right you exercise. We answer within one month. You can also delete your account yourself from your profile page. If you disagree with how we handle your data, you can complain to the Spanish Data Protection Agency (aepd.es).

7. Security

We apply technical and organizational measures to protect your data against loss, alteration, and unauthorized access. Passwords are stored hashed and report files are stored in private storage.

8. Cookies

hostboost.pro sets one cookie, lang, to remember the language you picked, for one year. The app uses a session cookie to keep you signed in and a CSRF token cookie to protect forms. All of them are necessary for the service, so no consent banner is needed. We do not use analytics or advertising cookies.

9. Changes

We update this policy when the service changes. The date at the top shows the current version. If a change affects how we use your data, we tell account holders by email.