Privacy Policy

Overview

HOST Platform, Inc. ("HOST," "we," "us") provides a waitlist management system used by restaurants and their guests. This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your personal information.

This policy applies to two groups: Restaurant Clients — businesses that subscribe to HOST — and Guests — individuals who join a waitlist at a restaurant that uses our system.

Information We Collect

From Guests (people joining a waitlist):

• –Name (required to join the waitlist)
• –Phone number (optional — provided only if the guest wants SMS updates)
• –Party size and seating preference
• –Any notes entered by restaurant staff (e.g., allergies, special occasion)

From Restaurant Clients:

• –Restaurant name, address, and contact information
• –Account login credentials (stored hashed — never as plaintext)
• –Billing information (processed by our payment processor; HOST does not store card numbers)
• –Floor plan layout and configuration preferences

Automatically collected:

• –Basic usage data for system reliability
• –IP addresses and browser/device type for security and debugging
• –Session cookies used to keep restaurant staff logged in

How We Use Your Information

Guest information is used solely to operate the waitlist — notifying guests when their table is ready, tracking position in line, and enabling hosts to manage seating. Guest phone numbers are never used for marketing.

Restaurant client information is used to provide and maintain the HOST service, process billing, and communicate about the account.

Automatically collected data is used for service reliability and security. We do not use it for advertising.

SMS Notifications

SMS delivery is handled by third-party messaging providers. Guest phone numbers are used only to send the table-ready notification and are not retained beyond the active waitlist session.

Information Sharing

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

We share information only with service providers that help us operate HOST:

• –Twilio / TextBelt — SMS delivery
• –Supabase — database hosting
• –Railway — application hosting
• –Payment processor — billing for restaurant subscriptions

These providers are contractually required to use information only to perform services for HOST. We may also disclose information if required by law or to protect the safety of HOST or others.

Data Retention

Guest waitlist data is cleared at the close of each business day. Phone numbers are not retained after a guest is seated.

Restaurant client account data is retained for the duration of the subscription and up to 90 days after cancellation, after which it is deleted.

California Residents — Your Rights Under the CCPA

If you are a California resident, the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq., as amended by the CPRA) gives you the following rights:

• –Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you.
• –Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions.
• –Right to Correct — request correction of inaccurate personal information we hold about you.
• –Right to Opt Out of Sale or Sharing — HOST does not sell or share personal information for cross-context behavioral advertising. No opt-out is necessary, but you may contact us to confirm.
• –Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

To submit a request, email demo@hostplatform.net with the subject line "California Privacy Request." We will respond within 45 days. We may ask you to verify your identity before processing the request.

For guest-side requests, please include the restaurant name, approximate date of visit, and the name used when joining the waitlist.

Cookies

This site uses minimal cookies — primarily a session cookie that keeps restaurant staff logged into the HOST dashboard. We do not use advertising cookies or third-party tracking cookies.

Security

We protect personal information using industry-standard measures including encrypted storage, hashed credentials, HTTPS in transit, and access controls. No system is perfectly secure, but we take the protection of your data seriously.

Children's Privacy

HOST is not directed at children under 13. We do not knowingly collect personal information from children. Contact us if you believe a child has provided us with personal information and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify restaurant clients via email.

Contact Us

For questions or privacy requests:

• –Email: demo@hostplatform.net

HOST Platform, Inc.