Data Processing Agreement

Last Updated: March 22, 2026

Appstack, LLC (North Carolina)

1. Scope

This Data Processing Agreement applies to users in the EU/EEA who use HostClaim.

2. Data Controller

The HostClaim user is the data controller for guest data they upload to the platform.

3. Data Processor

Appstack, LLC acts as a data processor on behalf of the user.

4. What We Process

We process name and email (signup), property addresses, claim details and damage descriptions, photos and videos uploaded, GPS coordinates (evidence uploads and baseline uploads), payment information processed by Stripe (Stripe holds this data, not HostClaim), iCal feed URLs, booking data from iCal (guest names and check-in/check-out dates), and browser locale/language preference.

5. Sub-processors

HostClaim uses the following sub-processors: Supabase, Stripe, Resend, and Vercel.

6. Security

Data is encrypted in transit and at rest using Supabase and Vercel infrastructure.

7. Retention

Data is retained until account deletion or user request.

8. User Rights

Users may request access, rectification, erasure, and portability by contacting claims@hostclaim.com.

9. Governing Law

This agreement is governed by the laws of North Carolina, with GDPR obligations honored for EU users.