Privacy Policy
Introduction
HOSTA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and related services (collectively, the "Service"). It should be read together with our Terms of Service.
Information We Collect
Personal Information
We collect information you provide directly, including:
- Name, email address, password, phone number, and university
- Preferred move-in dates, booking and application details, and messages or notes you submit
- Payment and transaction details, including Paystack references and payment status; payment credentials are handled by Paystack
- Manager onboarding information, including business details, Ghana Card information, payout details, and verification documents
- Hostel and room information, including addresses, coordinates, amenities, photos, videos, prices, and availability
- Reviews, ratings, saved hostels, and notification read status
Automatically Collected Information
We automatically collect certain information about your device and usage, including:
- Device identifiers and browser type
- IP address and approximate location data where provided or enabled
- Pages visited and actions taken
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and send related information
- Send technical notices and support messages
- Respond to your inquiries and provide customer support
- Monitor and analyze trends, usage, and activities
- Detect and prevent fraudulent transactions
- Personalize and improve your experience
- Send service notifications, booking updates, interview and application updates, payment messages, and support communications
How Information Is Shared
We share information only as needed to operate HOSTA, complete transactions, and provide the Service. This may include sharing a student's relevant profile and booking or application details with the manager of the selected hostel. Managers may see contact information needed for a confirmed booking; during application review, access is more limited and phone details are withheld until conversion where the system supports that restriction.
Hostel and room listings, photos, videos, locations, amenities, and reviews may be displayed publicly or to other Service users. We may share information with service providers that support authentication, hosting, payments, email delivery, storage, maps, analytics, security, and customer support, subject to their own terms and privacy policies.
We may disclose information to comply with law, enforce our agreements, protect users and the Service, investigate fraud or security incidents, or support a business transfer. We do not sell personal information as a standalone product.
Accounts, Storage, and Communications
Your student or manager account is authenticated through Supabase. The regular account session may persist so you can use the Service across visits. We store uploaded profile images, hostel and room media, and manager verification documents in the storage systems used to provide the Service. Booking, application, payment, payout, notification, and audit records may be retained as needed for operations, fraud prevention, dispute handling, accounting, and legal obligations. We may send in-app notifications and, where an email address is available, transactional emails about your account, applications, bookings, payments, and related updates.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Access is controlled by account roles and database policies where supported. However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
Third-Party Services
We use third-party service providers to process payments (Paystack), manage authentication and database services (Supabase), deliver email, store media and documents, provide maps or location services, and host or secure our infrastructure. These providers process information under their own terms and privacy policies and are used to provide services to HOSTA. Paystack processes online payment details; HOSTA receives transaction information such as a payment reference, amount, and status rather than your full payment credentials.
Data Retention and Requests
We retain information for as long as reasonably necessary to provide the Service, maintain booking and financial records, resolve disputes, prevent abuse, and meet legal or regulatory requirements. You may contact us to request access to, correction of, or deletion of personal information, subject to verification, legal obligations, transaction records, and information needed to maintain the security and integrity of the Service. We may retain de-identified or aggregated information.
Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Opt-out of marketing communications
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
HOSTA
Email: @hosta2523@gmail.com
WhatsApp: +233 (0) 53 160 3416
Last updated: 10/25/2026