Privacy Policy

2° ("we," "us," or "our") operates the platform at host2degrees.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. By using the Platform you consent to the practices described in this policy.

Information you provide:

• Account information: name, email address, phone number, password (stored as a one-way hash).
• Profile information: bio, avatar photo.
• Listing information: property address, photos, descriptions, pricing.
• Booking information: travel dates, guest notes.
• Communications: messages sent between hosts and guests on the Platform.

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps.
• Device information: operating system, device type.
• Cookies and similar technologies used for session management and authentication.

Information from third parties:

• If you sign in with Google, we receive your name, email address, and profile photo from Google.
• Payment information is handled directly by Stripe — we receive only a tokenized reference, never your full card details.

We use your information to:

• Create and manage your account.
• Facilitate bookings, payments, and communications between hosts and guests.
• Verify your identity via email and phone (SMS OTP).
• Send transactional emails (booking confirmations, verification codes, password resets).
• Display your profile to users within your social connection network.
• Improve, maintain, and secure the Platform.
• Comply with legal obligations.
• Enforce our Terms of Service.

We do not sell your personal information to third parties. We do not use your data for behavioural advertising.

We share your information only as follows:

• With other users: Your name, avatar, and profile are visible to users within your social network on the Platform. Hosts and guests share contact information as needed to complete a booking.
• Service providers: We share data with Stripe (payment processing), Twilio (SMS verification), Resend (transactional email), and Cloudflare (infrastructure and file storage). Each is bound by data processing agreements.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of 2°, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes.

We use strictly necessary cookies for authentication session management. We do not use advertising or tracking cookies. You may disable cookies in your browser settings, but this will prevent you from signing in to the Platform.

We implement industry-standard security measures including encrypted data transmission (TLS), hashed password storage, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not liable for unauthorised access beyond our reasonable control.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing activities.

To exercise these rights, email us at hello@host2degrees.com. We will respond within 30 days.

The Platform is not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

Your data may be processed and stored in countries other than your own, including the United States. By using the Platform you consent to such transfers. Where required, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of the Platform after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at hello@host2degrees.com.