Privacy Policy

Last updated: October 11, 2026

Who we are

Grego Morales, trading as HostMate is the data controller for personal data processed through HostMate. For guest details hosts enter, the host decides why they're collected and we process them on the host's behalf. We follow the Philippine Data Privacy Act of 2012.

What we collect and why

• Account data (name, email, login details) — to create and secure your account (contract).
• Listing and business data (properties, prices, bookings, expenses, messages) — to provide the service (contract).
• Guest data hosts enter or guests submit (name, mobile, email, ID type and number) — to manage bookings and building admin forms (contract; host's legal obligations).
• Support messages — to help you (legitimate interests).
• Usage and device data (IP address, browser, pages used) — for security, fraud prevention and improving HostMate (legitimate interests).
• Marketing preferences — to send updates, only with consent.

Who we share it with

• Service providers who host and run HostMate, including AI processing for reply drafts.
• Paddle, our Merchant of Record, for selling subscriptions, payments, tax and invoicing.
• Payment providers hosts connect for guest bookings.
• Professional advisers (legal, accounting), and authorities where the law requires.

Retention

We keep data while your account is active and as needed for legal and accounting duties, then delete or anonymise it.

Security

We use encryption in transit, access controls so each host only sees their own data, and limited staff access.

Your rights

You can ask to access, correct, delete or export your data, object to processing, or withdraw consent. You may also complain to the National Privacy Commission. Email hello@gethostmate.com.

Cookies

We use essential storage to keep you signed in. We don't use advertising cookies.