Security & data
Short answers to the questions hosts ask before they hand a platform their calendar. The Terms of Service and Privacy Policy are the precise versions.
Accounts and access
Everything is scoped to your workspace. Team members get in by invitation only, and every request checks both the session and the workspace membership on the server.
Guest data roles
For guest personal data, the host is the data controller and Supahost is the processor. We process guest data to run your properties — never to sell it, and never for third-party advertising.
AI features run under the same rule. Model providers we use are barred from training on your content.
Retention and export
Your data is yours to take. If you close your account, you have a 30-day window to export your reservations, guest records, and property data before deletion.
Questions
Security questions, data requests, and anything the legal pages leave open go to support@supahost.io. We answer them directly.