Access & authentication
Host Haven accounts require authenticated access. App data is organised around account and property access so hosts and invited collaborators only see the areas they are allowed to use.
Trust, security and privacy
Built to help hosts run their businesses with confidence.
This page is maintained by Host Haven Group Ltd to answer common security and privacy questions about Host Haven. It explains current practices in plain language and is not a certification, audit report or independent verification.
Data protection
Property, booking, guest and operational data is stored in a managed backend with row-level access controls and encrypted connections in transit.
Payments
Subscription checkout and payment details are handled by Paddle as Merchant of Record. Host Haven does not store card numbers in the application.
Email sending via Gmail
If you connect Gmail, Host Haven uses the Gmail send scope only to send the emails you compose in the Service through your own inbox. We do not read your inbox, download attachments, or collect email data beyond what is required for sending those communications.
Connected calendars
Calendar and channel imports are used to keep availability in sync. Connected data should be limited to the calendars and sources hosts choose to add.
Shared responsibility
Security works best when the platform and the host each do their part.
Host Haven provides application controls and managed platform services. Hosts remain responsible for the accuracy of the data they enter, the people they invite, and the third-party channels they connect.
Recommended account practices
- ✓Use unique, strong passwords and keep login access limited to trusted team members.
- ✓Remove collaborators when they no longer need access to a property or operation.
- ✓Only add booking channels, iCal feeds, email accounts and integrations you trust and actively use.
- ✓Disconnect Gmail from Settings when you no longer want the Service to send email through your account.
- ✓Contact us quickly if you suspect unauthorised access or incorrect data exposure.
Privacy & retention
Our privacy notice explains what data we collect, why we use it, who we share it with and how to request access, correction or deletion.
View privacy noticeSubprocessors
We use trusted service providers for hosting, database, email delivery, analytics, support tooling and subscription payments as described in our privacy notice.
See data sharing detailsReport a concern
If you believe you have found a security issue, privacy concern or incorrect access to data, contact us with enough detail for us to investigate.
admin@gethosthaven.com