Privacy Policy
Effective date: June 27, 2026
Information We Collect
When you use HostShift, we collect the following information:
- Restaurant name and business details you provide during setup
- Email address used to create and access your account
- Menu files you upload (images in JPG, PNG, or WebP format, and PDFs) for AI-powered content generation
- Social media content generated on your behalf
- Billing information — payments are processed by Stripe; HostShift does not store your card number or full payment details directly
How We Use Your Information
We use the information we collect to:
- Generate AI-powered social media content for your restaurant using OpenAI (GPT-4o)
- Send transactional emails such as login links, password resets, and subscription confirmations
- Process payments and manage your subscription via Stripe
- Maintain your account and content history so you can revisit past generations
- Improve the reliability and quality of our service
Data Sharing
We share data only with the third-party providers necessary to operate HostShift:
- OpenAI — your uploaded menu content is sent to OpenAI's API to generate social posts; OpenAI's privacy policy governs their handling of this data
- Stripe — billing and subscription management; Stripe's privacy policy applies to payment data
- Neon (PostgreSQL) — our database provider stores your account and content data securely
We do not sell, rent, or share your personal data with any third party for marketing purposes.
Data Retention
We retain your account data, menu uploads, and generated content for as long as your account is active. If you close your account or request deletion, we will remove your personal data from our systems within a reasonable timeframe.
Your Rights — Access and Deletion
You have the right to:
- Request a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and all associated data
To exercise any of these rights, email us at hello@hostshift-2.polsia.app. We will respond within 30 days.
Cookies and Session
HostShift uses a single HttpOnly session cookie to keep you logged in. This cookie is set only after you authenticate and is used solely to maintain your session — it is not used for advertising or third-party tracking. We do not use third-party tracking or analytics cookies.
Contact
If you have questions or concerns about this privacy policy or how we handle your data, please contact us at: