Data Protocol

Privacy Policy

Last Updated: January 2026

1. Data We Collect

CartHost acts as a data processor for Hosts and a data controller for account information. We collect:

  • Account Data: Name, email, and property details for Hosts.
  • Guest Data: Names, signatures, and device metadata (IP address, User Agent) collected via waivers.
  • Evidence Data: Photos, timestamps, and geolocation data uploaded during inspections.

2. How We Use Your Data

Your data is used strictly to provide the Service, specifically:

  • Generating "Evidence Packets" for liability protection.
  • Authenticating users and managing fleet access.
  • Improving the security and functionality of the platform.

3. Data Retention & Evidence

Because CartHost is a liability protection tool, we retain rental records, waivers, and photos ("Evidence") for a period determined by the Host's subscription plan or until account deletion, to ensuring you have access to records in case of future disputes.

4. Third-Party Sharing

We do not sell your data. We share data only with essential infrastructure providers (e.g., Supabase for database hosting, Vercel for hosting) required to operate the Service.

5. Contact Us

If you have questions about this privacy policy or your data rights, please contact us at support@carthost.app.