AcceleratorPricing
Get Started
Back to home
Legal

Privacy Policy

Last updated: January 7, 2026

This Privacy Policy explains how your data is collected and processed by HOSPUP (see Legal Notice). We are committed to protecting your privacy and personal data.

01

Introduction

Hospup ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video creation platform ("Service").

This policy complies with:

GDPR
General Data Protection Regulation (EU)
CCPA/CPRA
California Consumer Privacy Act (USA)
French Data Protection Act
Loi Informatique et Libertés
International Laws
Other applicable data protection laws
02

Data Controller

The data controller responsible for your personal data is HOSPUP. For complete company information, see our Legal Notice.

Data Protection Contact

contact@hospup.com

Supervisory Authority (France)

CNIL — www.cnil.fr
03

Information We Collect

Information You Provide

Account Information
Email address, password (encrypted), name
Accommodation Data
Property names, locations, cities, countries
User Content
Videos, images, and audio files you upload
Generated Content
Videos and text created using our Service
Payment Information
Processed securely by Stripe (we do not store card details)
Communications
Messages you send to our support team

Information Collected Automatically

Device Information
Device type, operating system, browser type
Log Data
IP address, access times, pages viewed, referring URL
Usage Data
Features used, actions taken, time spent
Location Data
Country and region based on IP address (not precise)

Information from Third Parties

  • Google OAuth: Email address and name when you sign in with Google
  • Stripe: Payment confirmation and subscription status
  • Instagram: Content you choose to import (with your authorization)
04

How We Use Your Information

Service Provision

  • Creating and managing your account
  • Processing your videos and content
  • Storing and delivering your files
  • Processing payments
  • Providing customer support

Service Improvement

  • Analyzing usage patterns
  • Developing new features
  • Troubleshooting issues
  • Ensuring security
  • Preventing fraud

Communications

  • Transactional emails
  • Important service changes
  • Marketing (with consent)
05

Legal Basis for Processing (GDPR)

We process your data based on:

Contract Performance
Processing necessary to provide the Service you requested
Consent
Marketing communications and optional data processing
Legitimate Interests
Security, fraud prevention, and service improvement
Legal Obligation
Compliance with applicable laws and regulations
06

Data Sharing & Disclosure

We do not sell your personal data.

Service Providers

We share data with trusted third-party providers:

Amazon Web Services (AWS)
Cloud hosting and file storage (EU region)
Stripe
Payment processing (PCI-DSS compliant)
hCaptcha
Bot protection and security
Anthropic
AI processing for content generation

All providers are bound by data processing agreements.

Legal Requirements

We may disclose information if required by:

  • Valid legal requests from authorities
  • Court orders or legal process
  • Protection of rights, privacy, safety

Business Transfers

In the event of a merger, acquisition, or sale, your data may be transferred. You will be notified of any such change.

07

International Data Transfers

Your data may be transferred to countries outside your residence, including the United States. For transfers outside the EEA, we ensure protection through:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions (for certain countries)
  • Data processing agreements with providers
08

Data Retention

We retain your data for the following periods:

Account DataWhile active + 30 days after deletion
User ContentWhile active, deleted within 30 days of closure
Payment Records7 years (legal requirement)
Log Data90 days
Marketing DataUntil consent withdrawn
09

Instagram Integration & Data Deletion

Instagram Data We Access

When you connect your Instagram account, we access the following data with your explicit authorization:

Basic Profile
Username, account type, follower count
Insights & Analytics
Reach, impressions, profile views (last 30 days)
Audience Demographics
Age, gender, country distribution (aggregated, anonymous)

We do not post on your behalf, access your direct messages, or view your private content.

How to Delete Your Instagram Data

To delete your Instagram data from Hospup, follow these steps:

1Log in to your Hospup account at hospup.com
2Go to your Dashboard
3Click "Disconnect Instagram"
4Your Instagram connection and all associated analytics data will be permanently deleted from our servers

Alternative method: Email privacy@hospup.com with the subject "Delete my Instagram data" and we will process your request within 48 hours.

Revoke Access from Instagram

You can also revoke Hospup's access directly from Instagram:

1Go to Instagram Settings → Website Permissions → Apps and Websites
2Find "HOSPUP" in the list
3Click "Remove" to revoke access

Note: Revoking access from Instagram will also disconnect your account in Hospup.

10

Your Rights

GDPR Rights (EU/EEA)

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion ("right to be forgotten")
  • Restriction: Request limitation of processing
  • Portability: Receive data in machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time
  • Lodge Complaint: File with supervisory authority (CNIL)

CCPA Rights (California)

  • Know: What personal information is collected
  • Delete: Request deletion of personal information
  • Opt-out: Of sale of personal info (we do not sell)
  • Non-discrimination: For exercising your rights

To exercise your rights, contact us at

contact@hospup.com

We will respond within 30 days.

11

Data Security

We implement appropriate technical and organizational measures:

Encryption of data in transit (TLS/SSL) and at rest
Secure password hashing (bcrypt)
Regular security audits and updates
Access controls and authentication
Secure cloud infrastructure (AWS)
Regular backups and disaster recovery

While we strive to protect your data, no method of transmission is 100% secure.

12

Cookies & Tracking

Essential
Required for authentication and security
Functional
Remember your preferences
Analytics
Help us understand usage

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

13

AI & Automated Processing

  • Your input text is sent to AI providers for processing
  • Photos may be processed by AI for video generation
  • AI-generated content is not stored by providers beyond the request
  • We do not use your content to train AI models
14

Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover such data, we will delete it promptly.

15

Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

16

Changes to This Policy

We may update this policy. Material changes will be notified by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date
  • Email notification for significant changes
17

Contact Us

For questions, concerns, or to exercise your rights

contact@hospup.com

Response time: Within 30 days

If unsatisfied with our response, you may lodge a complaint with CNIL (www.cnil.fr) or your local data protection authority.

Hospup: Social media tools for hotels