This Privacy Policy explains how Neddz Research LLC ("HostTarget," "we," "us," or "our") collects, uses, and shares information in connection with the HostTarget service (the "Service"). It's part of the same agreement as our Terms of Service — terms not defined here have the meaning given there.
| Category | Examples | Source |
|---|---|---|
| Account & company info | Name, email, hashed password, company name, role (admin/member), join code | You, at signup |
| Billing info | Subscription plan, billing history, payment method details | You, via Stripe (we never receive or store raw card numbers) |
| Lead pipeline data | Notes, statuses, and preferences your team attaches to leads; leads you import via CSV | You and your teammates |
| Third-party listing data | Publicly available listing details, reviews, and estimated market/revenue metrics for properties you scan | AirROI and public listing pages (see Section 6 of the Terms) |
| Usage & device data | Log data, IP address, browser type, pages viewed, session cookies | Automatically, when you use the Service |
| Support communications | Anything you send to support@hosttarget.app | You |
We do not sell your personal information, and we do not use your Customer Data to train third-party AI models beyond what's needed to provide a feature you've directly invoked (e.g., an AI-assisted lead summary you request).
We share information only:
| Provider | Purpose |
|---|---|
| Supabase (Postgres) | Primary database hosting |
| Render | Application hosting |
| Stripe | Subscription billing and payment processing |
| Resend | Transactional email (password resets, notices) |
| AirROI | Market and listing data that powers scans and scoring |
| Anthropic | AI features you directly invoke — review-text analysis, paste-to-analyze, and drafting an outreach email — which send the relevant review text, property details, and/or revenue estimate to Anthropic's API to generate the result |
| U.S. Census Bureau | Public neighborhood income/home-value statistics, looked up by a lead's approximate ZIP code |
| OpenStreetMap Nominatim | Reverse geocoding a lead's coordinates into an approximate address |
Each provider processes data under its own privacy policy and only to the extent needed to provide its service to us.
We retain account and Customer Data for as long as your account is active. When you or your company delete an account (see Section 6), the underlying records are removed from our live database immediately; a copy may persist in encrypted backups for up to 90 days afterward, after which it is purged as part of our normal backup rotation. If you're the last member of your company and delete your account, your company and its entire lead pipeline are deleted immediately and permanently from the live database, subject to that same 90-day backup purge window.
This self-serve flow is the fastest way to export or delete your data and should cover most requests. If you'd rather not use it — for example, you want your data deleted but no longer have access to your account, or you want to confirm a deletion completed — email support@hosttarget.app from the email address on the account with the subject line "Data deletion request" (or "Data export request"). We will verify you're the account holder or a company administrator and complete the request within 30 days, confirming by email when it's done.
If you're a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to: know what personal information we've collected about you; request deletion of that information (see Section 6); correct inaccurate information; and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we have not done so in the 12 months before this policy's last-updated date. We will not discriminate against you for exercising any of these rights. To exercise them, contact support@hosttarget.app.
HostTarget is operated from the United States and the Service is intended for use by businesses located in the United States. If you are located outside the United States, or you use the Service to process personal information about individuals located in the European Economic Area, United Kingdom, or Switzerland, please note that we do not currently maintain a Data Processing Agreement, Standard Contractual Clauses, or an EU/UK representative. Contact us at support@hosttarget.app before relying on the Service in a way that would require those commitments, and we'll let you know what we can — or can't yet — support.
Passwords are stored hashed (never in plain text), sessions use httpOnly cookies, and access to your company's data is scoped to logged-in members of that company. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
We use a single essential session cookie to keep you logged in and a local browser preference for light/dark theme. We do not currently use third-party advertising or tracking cookies; if we add optional analytics cookies in the future, we'll ask for your consent first via our cookie banner. See our full Cookie Policy for details, and use the "Cookie preferences" link in the footer of any page to change your choice anytime.
The Service is intended for business use by adults and is not directed to anyone under 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify account administrators by email or in-app notice.
Neddz Research LLC
Privacy, data requests & general inquiries: support@hosttarget.app