DRAFT — NOT LEGAL ADVICE — DO NOT PUBLISH WITHOUT DAVID'S APPROVAL.
Prepared Oct 22, 2026 (PT) by Morgan Hale (Legal & Compliance, not a lawyer) for NerdyHippo LLC. Updated Oct 22, 2026 with build facts from Arlo (Build Lead). Bracketed items are open questions or build items. Have a licensed attorney review before use. This draft is not a statement that Boast Host meets any law.

Product fixes recommended before publishing (for Remy and Arlo; not policy text)
1. Exclude cleaner token pages (/a/, /u/) from PostHog, or at least strip token URLs, and turn off session recording there.
2. Consider turning session recording off, or limiting it.
3. Add a retention purge job for outbound_messages and logs, and set expiry on email tokens and on share links that are turned off.
4. Add an account-deletion path (an email request is fine for now).
5. Keep parking data out of ChatGPT.
6. Retire or purge the legacy Twilio data if texting has ended.
7. Build an analytics opt-out (see Section 7) before publishing, or remove that line.

Boast Host Privacy Policy

Effective date: [EFFECTIVE_DATE]

This policy explains what information NerdyHippo LLC, dba Boast Host ("Boast Host," "we"), 423 7th Street, Unit 810, Oakland, CA 94607, collects through boasthost.com, our emails, cleaner links and the Boast Host app in ChatGPT, and how we use it. [FBN_STATUS: Boast Host fictitious business name] Questions: support@boasthost.com.

1. Who this covers

Hosts who create a Boast Host account.
Cleaners a host adds, who get requests, links and emails from us on that host's behalf.
Guests, only when a host adds stay or parking details about them.

For information a host adds about cleaners and guests, we act on the host's behalf as their service provider. The host decides what to add and is responsible for having the right to share it.

2. What we collect

Category	Examples	Source
Account	Name, email, login details, alert email addresses, settings	You
Listings and calendars	Listing names, time zone, calendar feed (iCal) link, checkout and check-in dates read from the feed	You / your booking platform's feed
Cleaning details	Cleaning dates and status, towel counts, late checkout, early check-in, cleaned rooms, room notes	You
Cleaner information	Name, phone, email, Yes/No answers and when they were given, email unsubscribe status	Host; the cleaner's own answers
Guest parking details	Guest name, car make, model, colour, licence plate, dates and notes. This is guest information entered by the host.	Host
Past text messages	From a texting feature we no longer offer: phone numbers and message text sent since Aug 5, 2026	Host / the Service
Billing	Stripe customer ID, subscription status, number of paid listings, billing country, state and postal code, invoice history, record of your agreement to auto-renewal terms	You / Stripe
Usage and device	Pages viewed, clicks and taps, session recordings (with typed inputs masked), page addresses, browser and device type, IP address, your user ID if signed in, and email delivery status	Automatically (see Section 7)

We don't receive or store your full card number. We read calendar feeds live and don't keep a copy of your bookings beyond the cleaning details above. We don't intentionally collect sensitive personal information as defined by California law.

3. How we use it

To run the Service: show schedules, send cleaners requests and evening summaries, record answers, and send hosts answer emails and alerts.
To bill you, calculate tax and keep records of your consent to auto-renewal.
To understand how the Service is used and to fix problems (analytics).
To keep the Service secure, prevent abuse and support you.
To follow the law and enforce our Terms.

We don't use your information, or your cleaners' or guests' information, to train AI models, and we don't sell it.

4. Cleaner contact information

Cleaner phone numbers and emails are used to send that cleaner requests and summaries from the host. Emails come from noreply@boasthost.com. Sharing cleaner contact details outside the Boast Host app (for example, into ChatGPT) is off by default. Each email we send a cleaner includes a one-click unsubscribe. Only the cleaner can undo her unsubscribe; a host can't turn it back on.

5. Using Boast Host in ChatGPT

If you connect Boast Host to ChatGPT, you sign in with your Boast Host account and choose what to ask.

What we send: only what's needed for your request, such as listing names, upcoming cleaning dates and statuses, and cleaner names.
What we don't send: calendar feed links; guest messages; guest parking details; and cleaner phone numbers or emails, which are off by default.
What happens next: information returned to ChatGPT becomes part of your ChatGPT conversation and is handled by OpenAI under its own terms, privacy policy (https://openai.com/policies/privacy-policy) and your ChatGPT data settings. On consumer ChatGPT plans, OpenAI may use conversations to improve its models unless you turn off "Improve the model for everyone." OpenAI says Business, Enterprise and Edu workspace data isn't used for training by default. OpenAI may also receive basic technical information from connected apps.
Your control: you decide whether to connect, and you can disconnect at any time in ChatGPT's settings. Please consider your cleaners' privacy before asking about them.

The Boast Host app in ChatGPT is published by [OPENAI_ACCOUNT_OWNER].

6. Who we share with

Service providers (subprocessors) that help us run the Service:
- Lovable Cloud, built on Supabase — app hosting, database and sign-in [confirm region]
- Lovable managed email — sends our emails from noreply@boasthost.com via notify.boasthost.com
- PostHog (US) — product analytics and session recording
- Stripe, Inc. — payments and tax calculation (https://stripe.com/privacy)
- Twilio — formerly used to send text messages; no longer used for new texts
- OpenAI — only if you connect ChatGPT (see Section 5)
The host you work with, if you're a cleaner (your answers and unsubscribe status).
Authorities, when the law requires it, or to protect rights and safety.
A buyer or successor, if the business is sold or merged, with notice to you.

We don't sell personal information, and we don't "share" it for cross-context behavioral advertising. Our providers are US-based.

7. Cookies, local storage and analytics

Staying signed in: our sign-in system (Supabase) keeps your session in your browser's storage. Without it you can't stay logged in.
Your theme: your light or dark mode choice is saved in your browser's local storage.
Analytics (PostHog): on every page, including cleaner answer and unsubscribe pages, we use PostHog to count page views, record clicks and taps, and record sessions so we can see where the app is confusing. Typed inputs are masked in recordings. PostHog uses local storage and a cookie, and links activity to your user ID when you're signed in. Page addresses are recorded, which on cleaner pages can include the link's code.
Your choice: you can opt out of analytics at [BUILD NEEDED: analytics opt-out setting or link]. You can also clear or block cookies and local storage in your browser; sign-in will stop working if you block it.

We don't use advertising cookies.

8. How long we keep it

We don't yet delete data automatically on a schedule. Today:

Information is kept while your account is active, until you or we delete it.
Hosts can delete individual listings, cleaners and parking reservations in the app at any time.
If you ask us to delete your account or other information, we'll delete or de-identify it within [RETENTION_AFTER_DELETION_REQUEST], except what we must keep by law (such as billing and tax records and records of auto-renewal consent).
Stripe keeps its own payment records under its policy.

We plan to add automatic clean-up for older messages and logs and will update this policy when we do.

9. Security

We use reasonable safeguards, including encrypted connections, access limited to each host's own data, signed links and tokens for cleaner answers, and payment handling by Stripe. Hosts can turn off or regenerate a cleaner's link at any time. No system is perfectly secure; if we learn of a breach affecting your information, we'll notify you as the law requires.

10. Your choices and rights

Hosts can view and correct account, listing, cleaner and parking data in the app, and delete individual listings, cleaners and parking reservations.
To delete your whole account or get a copy of your data, email support@boasthost.com. There's no self-serve button for these yet.
Cleaners can unsubscribe from emails using the link in any email, and can ask the host, or us at support@boasthost.com, to correct or delete their information. Guests can do the same about parking details.
California residents can ask to: know what personal information we collect, use and disclose; get a copy; correct it; delete it; and limit use of sensitive personal information (we don't use any). You can also opt out of sale or sharing, though we don't sell or share. We won't treat you differently for using these rights.
How to ask: email support@boasthost.com or write to the address below. We'll verify your request, usually by confirming the account email, and respond within 45 days (we may extend once by 45 days with notice). You can use an authorized agent with written permission. If the request is about information a host added, we may pass it to that host.

11. Children

Boast Host is for adult hosts running rental properties. It isn't meant for children under 16, and we don't knowingly collect their information. If you think a child's information was added, contact support@boasthost.com and we'll delete it.

12. Where data is processed

We and our providers process data in the United States. [confirm region]

13. Changes

If we make material changes, we'll email hosts and update the effective date above before the changes take effect.

14. Contact

NerdyHippo LLC, dba Boast Host · 423 7th Street, Unit 810, Oakland, CA 94607 · support@boasthost.com

David Ly, Owner, NerdyHippo LLC