How HoztSync protects your information
Application checks and database access rules restrict workspace records by membership, role and property access. Our release checks exercise access between different workspaces and roles. These controls reduce risk; no service can guarantee that a security incident will never occur.
Administrators manage workspace access. Owners and staff see records permitted by their role, property access and assignments. Guests have access to their own stays. Remove access when someone no longer needs it, and keep your sign-in email secure.
Use your email to sign in and keep access to that inbox secure. Payment details are entered in Stripe's payment forms. Do not put card numbers, passwords or other payment credentials in messages or uploads.
We read the calendar feed Airbnb publishes and the emails you forward. We never ask for your Airbnb password and never log in as you.
Private files require authorized access. Some downloads use links that work for a limited time; removing access does not recall a file already downloaded. Database backups and uploaded files have separate recovery requirements. A database backup alone does not restore uploaded files.
HoztSync uses Supabase for application data and storage, Vercel for hosting, Resend for email and Stripe for payments. Provider processing, retention and other services are described in our Privacy Policy. A provider's certification does not certify HoztSync as a whole.
Report a security concern to hello@hoztsync.com. Include the affected page and a description, but no passwords, payment credentials or unnecessary guest information. See our Privacy Policy for data use and requests.