Privacy Policy

Data We Process

Hostrail may process hotel, room, rate, availability, tax, fee, cancellation policy, quote, hold, booking, payment status, refund, receipt, traveler contact, delegated user context, API, MCP, audit, security, and support data.

Hostrail does not ask end users to paste API bearer tokens, payment secrets, or hotel operator credentials into chat prompts.

How We Use Data

We use data to search availability, create quotes, place temporary holds, confirm bookings after explicit user approval, cancel bookings, calculate refunds, issue transaction receipts, enforce tenant isolation, prevent abuse, and troubleshoot integrations.

Quote responses are the source of truth for price, taxes, fees, cancellation policy, and expiry. Consequential actions such as booking confirmation and cancellation require explicit traveler consent.

AI Platform Integrations

Connected AI platforms may send user requests, tool arguments, and delegated user context to Hostrail when a user chooses to use the integration. Hostrail returns structured tool responses, including booking details, next actions, errors, and signed receipts.

Hostrail does not use AI platform tool traffic to train a general-purpose foundation model.

Sharing

We share data only as needed to operate the booking flow, including with hotels, property operators, payment providers, refund processors, channel managers, PMS providers, infrastructure vendors, support vendors, and legal or regulatory parties when required.

We do not sell traveler personal data.

Retention

We retain booking, payment, refund, audit, and receipt records for operational, legal, tax, fraud prevention, and dispute-resolution needs. Logs are retained for security and reliability for a limited operational period unless a longer period is required.

Contact

For privacy questions or data requests, contact privacy@hostrail.dev.

Read the Terms of Service.