Data Protocol
Privacy Policy
Last Updated: January 2026
1. Data We Collect
CartHost acts as a data processor for Hosts and a data controller for account information. We collect:
- Account Data: Name, email, and property details for Hosts.
- Guest Data: Names, signatures, and device metadata (IP address, User Agent) collected via waivers.
- Evidence Data: Photos, timestamps, and geolocation data uploaded during inspections.
2. How We Use Your Data
Your data is used strictly to provide the Service, specifically:
- Generating "Evidence Packets" for liability protection.
- Authenticating users and managing fleet access.
- Improving the security and functionality of the platform.
3. Data Retention & Evidence
Because CartHost is a liability protection tool, we retain rental records, waivers, and photos ("Evidence") for a period determined by the Host's subscription plan or until account deletion, to ensuring you have access to records in case of future disputes.
4. Third-Party Sharing
We do not sell your data. We share data only with essential infrastructure providers (e.g., Supabase for database hosting, Vercel for hosting) required to operate the Service.
5. Contact Us
If you have questions about this privacy policy or your data rights, please contact us at support@carthost.app.