Back to home

Legal

Privacy Policy

Last updated: January 7, 2026

This Privacy Policy explains how your data is collected and processed by HOSPUP (see Legal Notice). We are committed to protecting your privacy and personal data.

01

Introduction

Hospup ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video creation platform ("Service").

This policy complies with:

GDPR

General Data Protection Regulation (EU)

CCPA/CPRA

California Consumer Privacy Act (USA)

French Data Protection Act

Loi Informatique et Libertés

International Laws

Other applicable data protection laws

02

Data Controller

The data controller responsible for your personal data is HOSPUP. For complete company information, see our Legal Notice.

Data Protection Contact

contact@hospup.com

Supervisory Authority (France)

CNIL — www.cnil.fr

03

Information We Collect

Information You Provide

Account Information

Email address, password (encrypted), name

Accommodation Data

Property names, locations, cities, countries

User Content

Videos, images, and audio files you upload

Generated Content

Videos and text created using our Service

Payment Information

Processed securely by Stripe (we do not store card details)

Communications

Messages you send to our support team

Information Collected Automatically

Device Information

Device type, operating system, browser type

Log Data

IP address, access times, pages viewed, referring URL

Usage Data

Features used, actions taken, time spent

Location Data

Country and region based on IP address (not precise)

Information from Third Parties

  • Google OAuth: Email address and name when you sign in with Google
  • Stripe: Payment confirmation and subscription status
  • Instagram: Content you choose to import (with your authorization)

04

How We Use Your Information

Service Provision

  • Creating and managing your account
  • Processing your videos and content
  • Storing and delivering your files
  • Processing payments
  • Providing customer support

Service Improvement

  • Analyzing usage patterns
  • Developing new features
  • Troubleshooting issues
  • Ensuring security
  • Preventing fraud

Communications

  • Transactional emails
  • Important service changes
  • Marketing (with consent)

05

Legal Basis for Processing (GDPR)

We process your data based on:

Contract Performance

Processing necessary to provide the Service you requested

Consent

Marketing communications and optional data processing

Legitimate Interests

Security, fraud prevention, and service improvement

Legal Obligation

Compliance with applicable laws and regulations

06

Data Sharing & Disclosure

We do not sell your personal data.

Service Providers

We share data with trusted third-party providers:

Amazon Web Services (AWS)

Cloud hosting and file storage (EU region)

Stripe

Payment processing (PCI-DSS compliant)

hCaptcha

Bot protection and security

Anthropic

AI processing for content generation

All providers are bound by data processing agreements.

Legal Requirements

We may disclose information if required by:

  • • Valid legal requests from authorities
  • • Court orders or legal process
  • • Protection of rights, privacy, safety

Business Transfers

In the event of a merger, acquisition, or sale, your data may be transferred. You will be notified of any such change.

07

International Data Transfers

Your data may be transferred to countries outside your residence, including the United States. For transfers outside the EEA, we ensure protection through:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions (for certain countries)
  • Data processing agreements with providers

08

Data Retention

We retain your data for the following periods:

Account DataWhile active + 30 days after deletion
User ContentWhile active, deleted within 30 days of closure
Payment Records7 years (legal requirement)
Log Data90 days
Marketing DataUntil consent withdrawn

09

Your Rights

GDPR Rights (EU/EEA)

  • Access:Request a copy of your personal data
  • Rectification:Request correction of inaccurate data
  • Erasure:Request deletion ("right to be forgotten")
  • Restriction:Request limitation of processing
  • Portability:Receive data in machine-readable format
  • Object:Object to processing based on legitimate interests
  • Withdraw Consent:Withdraw consent at any time
  • Lodge Complaint:File with supervisory authority (CNIL)

CCPA Rights (California)

  • Know:What personal information is collected
  • Delete:Request deletion of personal information
  • Opt-out:Of sale of personal info (we do not sell)
  • Non-discrimination:For exercising your rights

To exercise your rights, contact us at

contact@hospup.com

We will respond within 30 days.

10

Data Security

We implement appropriate technical and organizational measures:

Encryption of data in transit (TLS/SSL) and at rest

Secure password hashing (bcrypt)

Regular security audits and updates

Access controls and authentication

Secure cloud infrastructure (AWS)

Regular backups and disaster recovery

While we strive to protect your data, no method of transmission is 100% secure.

11

Cookies & Tracking

Types of Cookies

Essential

Required for authentication and security

Functional

Remember your preferences

Analytics

Help us understand usage

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

12

AI & Automated Processing

Our Service uses AI for various features including caption generation, descriptions, and video generation from photos:

Your input text is sent to AI providers for processing

Photos you upload may be processed by AI to generate animated video clips

AI-generated content is not stored by providers beyond the request

We do not use your content to train AI models

You can choose not to use AI features

Photos processed for video generation are handled according to our data retention policy

Photo-to-Video Generation: When you use our photo-to-video feature, your photos are temporarily processed by third-party AI services to generate animated video content. These photos are processed in accordance with our service providers' data processing agreements and are not retained beyond the generation process.

13

Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover such data, we will delete it promptly.

14

Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

15

Changes to This Policy

We may update this policy. Material changes will be notified by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date
  • Email notification for significant changes

16

Contact Us

For questions, concerns, or to exercise your rights

contact@hospup.com

Response time: Within 30 days

If unsatisfied with our response, you may lodge a complaint with CNIL (www.cnil.fr) or your local data protection authority.

Hospup: All-in-one social media tool for accommodations