Who is responsible
INDEPENDENT HOTEL MANAGEMENT LTD is the data controller for Hostry account, workspace and support data. Our registered address is 60 Faraday Mill Business Park, Faraday Road, Plymouth, England, PL4 0ST. You can contact us at support@indephotelmann.shop or +44 7201238312. We determine why and how that data is used.
This policy applies to the Hostry website and online software. It does not cover the booking, payment or guest records you keep in your own systems.
What we collect and collection sources
We collect identity and contact data you enter, including name, email, phone and support messages; account and subscription identifiers; plan, renewal and billing status; technical data such as IP address, device, browser, timestamps and security logs; cookie choices; and consent records.
Workspace data includes user input such as property descriptions, guest-message context, amenity and access details, rate prompts and visual directions; generated copy, checklists, images and reels; uploaded property photographs; and generation task references. Do not upload unnecessary guest names, faces, payment details, identity documents or special-category data.
Collection sources are: information and files you submit through account, contact, property onboarding and workspace forms; data produced by your browser and essential cookies; hosting, authentication and security logs; subscription and transaction status returned by Stripe or PayPal when that method is offered; and output or task status returned by our AI provider and media-generation provider.
Why we use it and legal bases
- To provide the software, generate outputs, manage subscriptions and answer support under our contract with you.
- To prevent abuse, secure the service, keep reliable transaction records and establish legal claims based on our legitimate interests and legal duties.
- To send service messages and required billing notices under our contract.
- To send optional marketing only with consent where consent is required; you may withdraw it at any time.
- To meet accounting, tax, consumer-protection and lawful authority requests where required by law.
We do not sell personal information. We do not use your property inputs, uploads or generated outputs to train Hostry models.
Payments, orders and account records
Hostry charges only for its software subscription in USD. Stripe processes current card checkout and subscription management. PayPal processes payment account data only if a PayPal option is expressly offered. Hostry receives transaction identifiers, billing contact details, payment status, plan and limited card descriptors such as brand and last four digits; we do not receive or store the complete card number or security code.
Stripe and PayPal act under their own privacy notices for payment processing. Hostry never processes a guest’s room charge, deposit, booking guarantee or refund.
User input, AI outputs, files and deletion
Hostry processes user input to create the requested stay plan. Provider-backed text requests send the prompt to our AI provider; the structured continuity engine can return a rules-based plan without sending the prompt to that provider. Image and reel directions, together with an uploaded photograph only when you choose one, are sent to the media-generation provider. Generated results return to your browser through temporary provider links.
Hostry does not add text prompts or returned outputs to its application database in the normal workspace flow, and does not use user input, uploaded files or generated output to train Hostry models. Your browser holds the active bundle until you leave or download it. Uploaded property photographs are stored in protected object storage and exposed to the media-generation provider through a signed link that expires after one hour. The stored object remains until you request deletion or close the related account. Each AI provider may retain request data for security and service delivery for the period stated in its own terms.
Contact us to delete an uploaded file or workspace-linked record. We may retain a minimal security or transaction record where law requires it.
International transfers
Some processors operate outside the United Kingdom or European Economic Area. Where UK or EU data is transferred internationally, we use an adequacy decision, the UK International Data Transfer Agreement/Addendum, EU Standard Contractual Clauses or another lawful safeguard, plus supplementary controls where appropriate. You may ask for information about the relevant safeguard.
How long we keep it
- Lead and support records: ordinarily up to 24 months after the last contact.
- Subscription, invoice and transaction records: up to 7 years where needed for accounting, tax and disputes.
- Security logs: ordinarily up to 12 months unless an incident requires longer.
- Account profile and saved templates: while the account is active, then up to 30 days before deletion or de-identification.
- Uploaded files: until deletion or account closure; signed generation links expire after one hour.
- Active browser workspace: until you clear it, close the page or download the bundle.
We shorten or extend a period when necessary for legal claims, fraud prevention or a documented legal duty.
Security
We use access controls, encrypted transport, protected server credentials, signed file links, payment-provider boundaries, logging and least-privilege administrative access. No internet service can guarantee absolute security. Tell us promptly if you believe your account or uploaded property material has been accessed without permission.
GDPR and CCPA rights
Depending on where you live, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and complain to a regulator. UK users may complain to the Information Commissioner’s Office. EU users may contact their supervisory authority.
California residents may request to know, correct or delete covered personal information and receive equal service for exercising rights. We do not sell or share personal information for cross-context behavioural advertising, so there is no sale or sharing to opt out of. You may use an authorised agent where the law permits.
Email support@indephotelmann.shop to exercise a right. We may verify your identity and normally respond within the period required by applicable law.
Automated decisions and children
Hostry generates drafts and estimates, but it does not make decisions with legal or similarly significant effects about guests or operators. You decide whether an output is accurate and suitable.
Children under 13 may not use Hostry. Users aged 13–17 need a parent or guardian’s agreement. The product is designed for accommodation operators and is not directed to children.
Contact and complaints
Contact us using the details below with a privacy request or concern. Please describe the account email and the relevant record without sending passwords or payment credentials. You may also complain to the UK Information Commissioner’s Office or your competent local authority.