Privacy policy

GuayaSoft makes HostLedger, HostLens and HostLog, Chrome extensions for short-term rental hosts, and runs the website guayasoft.co. GuayaSoft is operated by Camilo Acosta, an individual based in British Columbia, Canada (“GuayaSoft”, “we”, “us”). This policy explains what information we collect, why we collect it, and the choices you have. If you have a question, write to support@guayasoft.co.

1. Data that stays on your device

Our extensions read Airbnb pages using your own logged-in browser session, the same way your browser already sees them, and save the results in your browser’s local extension storage. That includes reservations, payouts and expenses (HostLedger), comparable listings you capture (HostLens), and your listing’s change history and metrics (HostLog).

This data is not sent to us or anyone else. It leaves your browser only when you export it yourself, for example to a CSV or backup file saved on your own computer. Removing an extension deletes its stored data. We explain why we work this way in Why we don’t store your data.

2. Information we collect

Account information (trials and paid plans)

You need an account to start a free trial or buy a plan. You create it by signing in with your Google account, either in one of our extensions or on guayasoft.co; both lead to the same account. There is no separate password. For an account we store:

• what Google shares with us when you sign in: your name, your email address, and your Google account ID;
• your language preference, and whether and when you agreed to receive product emails;
• sign-in records: session identifiers, dates and times, and your browser type;
• what you have access to: which products, which plan, start and end dates, and whether it comes from a trial, a subscription, a lifetime purchase, or access we granted you directly.

Information from Google

When you sign in with Google, we ask Google only for your basic profile: your name, your email address, whether Google has verified that address, and your Google account ID. Google may also send your profile picture, which we don’t store. We never receive your Google password, and we don’t get access to your Gmail, contacts, Drive, calendar or any other Google data. We don’t keep the access token Google gives us after sign-in, and we don’t ask for ongoing access to your Google account.

We use this information only to create and secure your account, recognize you when you sign in again, allow one free trial per person, link your purchases to your account, and contact you about your account (and about our products, if you agreed). Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect GuayaSoft from your Google account at any time at myaccount.google.com/permissions.

Payment information

Payments are processed by Stripe, which collects your card or other payment details under its own privacy policy. We receive and keep a Stripe customer ID and the details of your purchases: plan, amount, dates, subscription status, and any refund or dispute. We never receive your full card number.

Usage information from the extensions

Our extensions may send us simple usage counts, such as how many times a feature was used on a given day and which version of the extension you have. These counts never include your reservations, financial figures, listing content or research.

• If you are not signed in, the counts are tied only to a random identifier created when you install the extension. It isn’t linked to your name, your email or your Airbnb account, and we don’t connect it to your account if you sign in later.
• If you are signed in, the counts are tied to your account, so we can see which features people use and improve the products.

Website

guayasoft.co uses Google Analytics to understand how visitors use the site: pages visited, the site you came from, your device and browser type, and your approximate location derived from your IP address. Google Analytics uses cookies to do this. Our hosting provider, Amazon Web Services, also processes your IP address and request details to deliver the site and keep it secure.

If you sign in on guayasoft.co (for example to buy a plan or manage your account), we set a sign-in cookie that keeps you signed in for up to 30 days. It holds only a random session code, can’t be read by scripts on the page, and is removed when you sign out. It’s needed for signing in and isn’t used for analytics or advertising. Signing in also loads Google’s sign-in script on that page, which Google runs under its own privacy policy.

Newsletter

If you subscribe to our newsletter, we send it through Kit (ConvertKit). Kit stores your email address and reports which emails were opened or clicked. Every email has an unsubscribe link.

Messages you send us

If you email us, we keep the message and your email address so we can reply.

3. How we use information

• to sign you in, run your trial, unlock the features you paid for, and check that access;
• to process payments and refunds and to prevent fraud and trial abuse, for example by allowing one trial per Google account;
• to send emails you need, such as receipts and notices about your account or subscription;
• to send product tips and marketing emails, only if you agreed to receive them. You can unsubscribe at any time;
• to understand how the products are used and make them better;
• to keep our services secure, fix problems, and meet our legal obligations.

We don’t sell or rent personal information. We don’t use it for advertising, we don’t transfer it to data brokers, and we don’t use it to decide anyone’s creditworthiness or for lending. Information from our extensions is used only to provide and improve the extensions’ features.

4. Who we share information with

We share information only with the service providers that help us run GuayaSoft:

• Amazon Web Services: website hosting and our account database;
• Stripe: payments, invoices and the billing portal;
• Kit: the newsletter and product emails;
• Google: sign-in, website analytics, and the Chrome Web Store, where you install our extensions.

We may also disclose information if the law requires it, or to protect our rights or someone’s safety. If GuayaSoft is ever sold or transferred, your information may go to the new owner, and we’ll tell you before that happens.

5. Where information is stored

Our account data is stored with Amazon Web Services in the United States, and our other providers may process information in other countries. Information stored outside your country may be accessible to authorities there under local law.

6. How long we keep it

• Account information and access records: until you delete your account.
• Sign-in sessions end after 60 days without use.
• Usage counts: up to 13 months, then deleted.
• Server logs: up to 30 days.
• Payment and transaction records: as long as tax and accounting law requires (in Canada, generally six years).
• When you delete your account, we keep a one-way coded version (a hash) of your Google account ID for each product you trialed, only to enforce one free trial per person. It can’t be turned back into your account ID, and it doesn’t include your name or email.

7. Your choices and rights

• Access and export: download a copy of your account information from your account page on guayasoft.co, or ask us for it.
• Correction: ask us to fix information that is wrong.
• Deletion: delete your account from your account page on guayasoft.co, or by emailing us. Deleting your account cancels any active subscription and ends paid access, including lifetime access. You can also disconnect GuayaSoft from your Google account at myaccount.google.com/permissions.
• Marketing emails: unsubscribe with the link in any email.
• Website analytics: block analytics cookies in your browser settings or with Google’s opt-out add-on.
• Usage counts: turn them off in the extension’s settings, where the extension offers that option.
• Data on your device: remove it by using the extension’s reset tools or removing the extension.

Depending on where you live, you may have other rights under laws such as Canada’s PIPEDA, the GDPR in the EU and UK, or California privacy law. These can include the right to object to or restrict some uses of your information, and the right to complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada. Where the GDPR applies, we rely on these legal bases: providing the service you asked for, our legitimate interest in running and protecting the products, your consent (for marketing emails and analytics cookies), and our legal obligations.

To make a request, email support@guayasoft.co. We answer within 30 days and may ask you to confirm you own the account first.

8. Security

We use HTTPS everywhere. Sign-in goes through Google, so we never handle a password. We store only coded (hashed) versions of session tokens, and we restrict who and what can access account data. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects it.

9. Children

Our products are made for adults who run rental businesses. They aren’t directed at children under 16, and we don’t knowingly collect their information.

10. Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. If the change is significant, we’ll also tell account holders by email or in the extension before it takes effect.

11. Contact

Camilo Acosta (GuayaSoft), British Columbia, Canada.
support@guayasoft.co