Privacy Policy

Information we collect

Hosync collects account information such as name, email address, business profile details, reservation data, guest records, payment records, and operational settings that users enter into the service.

When you sign in with Google, we may receive your Google account name, email address, profile image, and OAuth tokens needed to provide the integrations you enable.

Google user data

Hosync requests Google access only to support product features selected by the user, including signing in, synchronizing guest contact information with Google Contacts, and creating or updating reservation-related events in Google Calendar.

When a business owner opens the manual Google Contacts import, Hosync reads contact names, email addresses, phone numbers (including secondary values), Google contact identifiers, recorded gender, and relationships to show a review list. Opening, searching, filtering, selecting, or cancelling this list does not create guests or an import report.

Only eligible contacts that the owner selects and confirms are added as guests of that business or linked to existing guests without replacing their profile details. Unselected contacts are not created as guests. With access to guest relationships, standard Google relationships may link selected contacts to other imported guests or existing guests uniquely identified within the business. Temporary agenda names and validated email/phone identifiers are used to detect ambiguous relationships and discarded after that phase. Contacts that lack a name or lack both an email address and a phone number cannot be selected; ambiguous matches are skipped during import.

For imported contacts, we retain Google contact identifiers and secondary email addresses and phone numbers to recognize them in later imports. Guest records are visible to people in that business who have access to Guests.

For each import, Hosync may also store a review report containing the available names, email addresses, phone numbers, reasons why contacts were skipped or conflicted, and identifiers of any matching guests. Only the business owner who imported with the same Google account can view that report. It shows confirmed results; a partial import is not shown as complete.

A manual import does not create or delete contacts in Google. When guest relationships are imported and contact synchronization is enabled, Hosync may add missing reciprocal relationships to existing Google contacts linked to the importing owner’s account, while preserving other relationships entered there. If the owner explicitly uses Edit in the import review, Hosync sends only the submitted name and primary contact changes to Google Contacts; this does not create or update a Hosync guest until the owner separately confirms an import. Separately, when contact synchronization is enabled for a business, creating or editing a Hosync guest may create or update a Google contact.

Google user data is used only to provide and improve user-facing Hosync features. Hosync does not sell Google user data, use it for advertising, or transfer it to third parties except as needed to provide the service, comply with law, protect users, or with your consent.

Hosync use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

We use information to operate Hosync, authenticate users, manage hospitality workflows, provide customer support, maintain security, troubleshoot issues, and improve the reliability of the service.

We may send service messages such as account, security, reservation, or integration notices.

Data storage and security

We use technical and organizational safeguards designed to protect user data against unauthorized access, loss, misuse, or alteration.

Access tokens and sensitive integration credentials are stored for the purpose of maintaining the connected service and are handled with restricted access.

Data retention and deletion

We keep information for as long as needed to provide Hosync, meet legal obligations, resolve disputes, and enforce agreements.

Import review reports can be accessed for up to 30 days after the last confirmed write. A newer report can replace an older one sooner. Expired reports and their contact details are deleted by the daily cleanup, which can run up to 24 hours after expiry. Guest records and identifiers used to recognize contacts in later imports are retained separately under the general retention rules above.

Users may request account or integration data deletion by contacting Hosync. Users can also revoke Google access at any time from their Google Account permissions page.

Contact

For privacy questions or data requests, contact Hosync at privacy@hosync.com.