Legal
Last updated: 22 September 2026
This policy explains what personal data Hostlab collects, why, and what rights you have over it — whether you're a host using our dashboard or a guest opening a concierge page a host has shared with you. It applies to hostlab.ai, the Hostlab dashboard at app.hostlab.ai, and concierge pages created through Hostlab.
Hostlab ("we", "us") provides a digital concierge platform that lets hosts share Wi-Fi details, check-in steps, house rules, local recommendations and paid add-ons with their guests, without the guest needing to download an app or create an account.
This policy sits alongside our Terms & Conditions and covers everyone who interacts with Hostlab: hosts and property managers with a dashboard account, and guests who open a concierge page a host has shared with them.
Guests don't need to create an account, so we collect very little about them by default:
We use personal data to:
We don't sell personal data. We share it only with:
We use essential cookies to keep the dashboard and concierge pages working, and, where enabled, analytics cookies to understand usage and improve the Service. You can control non-essential cookies through your browser settings; blocking essential cookies may stop parts of the Service from working properly.
Subscription payments and guest add-on payments are handled by a third-party payment processor, which may offer card payment, Apple Pay or PayPal depending on your account. That processor collects and stores full payment details directly; we receive confirmation that a payment succeeded and limited transaction metadata, not full card numbers.
We keep host account data for as long as your account is active, and for a limited period afterwards to meet legal, accounting or dispute-resolution needs. Guest interaction data tied to a concierge page is kept while that page is active and for a limited period after, then deleted or anonymised.
Some of our service providers may process data outside the UK or EEA. Where that happens, we rely on safeguards recognised under UK and EU data protection law, such as Standard Contractual Clauses, to keep your data protected to the same standard.
We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we can't guarantee absolute security, but we work to keep the Service safe and to respond quickly if something goes wrong.
If UK or EU data protection law applies to you, you have the right to:
To exercise any of these rights, email hello@hostlab.ai. If you're unhappy with how we've handled your data, you also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
For content a host chooses to publish and share with their own guests, the host is generally responsible (as "controller") for that data, and Hostlab processes it on their behalf to provide the Service. If you're a guest and have a question about how a specific host has used your information, please contact that host directly; we're glad to help them respond to you.
Hostlab isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us and we'll delete it.
A concierge page may link to third-party sites or services the host has chosen to include, such as a booking page or social profile. We aren't responsible for the privacy practices of sites we don't operate, so it's worth checking their own policies.
We may update this policy from time to time. If we make a material change, we'll notify hosts by email or through the dashboard before it takes effect.
Questions about this policy or your data are welcome at hello@hostlab.ai.
