Data Processing Addendum

This Addendum forms part of the Terms and governs personal data we process on your behalf when you use HostEarnings. It reflects the GDPR's controller / processor model.

Roles

You are the controller of personal data you upload (property details, investor records, transaction notes). HostEarnings is the processor. We act only on your documented instructions, expressed through your use of the product.

Our commitments

We implement the security measures described in /security. We assist with access, deletion, and portability requests. We notify you of a confirmed personal-data breach without undue delay and within 72 hours of detection.

International transfers

Where personal data leaves the EEA, we rely on Standard Contractual Clauses with our subprocessors. You can request the SCCs at [email protected].

Return and deletion

On termination, you can export your data from Settings at any time. After 30 days from account closure, we permanently delete all personal data except what we're legally required to retain (e.g., billing records).