Privacy policy.
This is the plain version. We collect what we need to run your agent and bill you. We don't sell anything to anyone. You can delete your account from your dashboard at any time. The rest of the document gives the detail.
What's in here
01Who we are
HostNest.ai is operated by Oqtacore Sàrl, Route de Divonne 44, 1260 Nyon, Vaud, Switzerland. VAT CHE-406.118.174. We are the data controller for your HostNest account and for the data we need to run the service.
If you use HostNest for a business, we process the data on your server on your behalf. A data processing agreement is available on request.
Contact: contact@hostnest.ai · Data Protection Officer: dpo@hostnest.ai.
02What we collect & why
We collect what we need to (a) sign you in, (b) set up and run the server that hosts your agent, (c) bill you, and (d) help you when something breaks. The table shows each category, what we do with it, and our legal basis under GDPR Article 6.
| Category | What & legal basis |
|---|---|
| Account | Email address, display name, and either a password (stored salted and hashed, never in plain text) or your Google sign-in. Basis: contract (Art. 6(1)(b)). Used to sign you in and contact you. |
| Billing | Stripe customer ID, plan, subscription status, and trial and renewal dates. We never see or store your card. Basis: contract and legal obligation (Art. 6(1)(b) and (c)). |
| Your server & agent setup | Server ID, IP address and location; your Telegram bot's access token (encrypted); your Telegram user ID and name; your OpenRouter access token if you connect OpenRouter (encrypted); your time zone and agent settings. Basis: contract. |
| Activity record | Sign-ins, plan and billing changes, cancellations, server actions (restarts, snapshots, support access) and which service emails we sent you. Basis: legitimate interest in security, preventing fraud and fixing problems (Art. 6(1)(f)). |
| Server status | Whether your server is online, its software version and update status, and your OpenRouter credit balance if you connected OpenRouter. Basis: contract. |
| Support | Anything you send to support or the chat in your dashboard. Basis: contract. |
| Cookies & browser storage | See §3. Basis: contract (sign-in), legitimate interest (support chat, anonymous site statistics) and your consent (visit recordings). |
| How you use our site (only if you agree) | The pages you view, your clicks and scrolling, a recording of the visit with anything you type hidden, your browser and device, and roughly where you are, from your IP address. If you sign up, your earlier visits are linked to your account. Basis: consent (Art. 6(1)(a)), which you can withdraw at any time (§3). |
| How you found us | The link that brought you, or the site that sent you, if you arrived from one. Basis: legitimate interest (knowing which posts work). |
| ChatGPT waitlist | Your email address, the date you joined and the link that brought you, if you join the ChatGPT waitlist on our website. We use it to thank you once, and to email you once if HostNest becomes available for ChatGPT plans. Nothing else. Basis: consent (Art. 6(1)(a)), which you can withdraw at any time by writing to support@hostnest.ai. |
What we do NOT do. We don't read your conversations with your agent or the files on your server, except inside a support session that you open yourself (see §8). We don't sell, rent or trade any data. We don't use advertising trackers.
03Cookies & tracking
- Sign-in cookies keep you signed in to your dashboard. They're required, secure and HttpOnly.
- Preferences such as light or dark mode are stored in your own browser.
- Support chat. The chat window is provided by Crisp. It loads only when you open it, and only then does Crisp store a cookie so the conversation continues across pages.
- Site statistics. Our website uses Cloudflare Web Analytics, which counts visits without cookies and without identifying you.
- Visit recordings and click maps, only if you say yes. On our website and the signup pages of our app, we ask whether we may see how you use them. If you tap Accept, PostHog records the pages you view, your clicks and scrolling, and a recording of the visit with everything you type hidden (on the app's signup pages, all text is hidden too). It keeps an ID in your browser so it recognises your next visit. If you sign up, it links your earlier visits to your account by an account number, never your email address. If you tap No thanks, none of this loads. We remember your answer in one cookie (hn-consent) for a year. You can change your mind at any time with Cookie settings at the bottom of our pages.
- Where you came from. If you arrive from a link we shared, the name of that link, or of the site that sent you, goes with you to signup and is kept with your account, so we know which posts work. Nothing is stored in your browser for this.
We don't use Google Analytics, Meta Pixel or any advertising trackers.
04Service providers
These companies process data on our behalf to run HostNest:
| Provider | What it does |
|---|---|
| Cloudflare | Runs our website and platform, including the database with your account record and its logs. The database is hosted in Europe; Cloudflare may process the logs outside the EU (see §7). |
| Hetzner | Runs the server your agent lives on, in Germany or Finland. |
| Stripe | Processes payments. Your card details go directly to Stripe; we never see them. |
| Resend | Sends our service emails (sign-in codes, trial, billing and account emails) and the ChatGPT waitlist emails. |
| Crisp | Provides the support chat and support email. |
| Sentry | Receives error reports from our platform, so we can fix problems. A report can include your account ID or email address. Secret keys are removed first. |
| Signs you in, if you choose "Sign in with Google". Google Fonts also serves some of the fonts on this page and our terms, and receives your IP address when they load. | |
| Fontshare | Serves the fonts on our website. It receives your IP address when a page loads. |
| PostHog | Records how visitors use our website and signup pages, only for people who tap Accept (see §3). Hosted in the EU, in Frankfurt. |
| Telegram | Carries support requests to our team. When you send one, we get a Telegram message with your email address, your server's name and IP address, the topic, the ticket number and your note. |
| Anthropic | Runs the AI agents we use for support and operations. When they handle your support request, or work in a support session you open, what they read is processed by Anthropic under our own account. |
The services your agent uses under your own accounts, such as your Telegram bot, your Claude account and OpenRouter, are not our service providers for that use. You use them under your own accounts and their own terms. See §10.
We'll email account holders at least 30 days before adding a new service provider that handles personal data.
05How long we keep things
- Account and setup data: until you delete your account.
- Your server, and everything your agent knows: deleted 7 days after your subscription ends, or 14 days after a payment first failed if it's never paid. Its backups and snapshots are deleted at the same time. We email you the date beforehand. Your account itself stays, so you can come back, until you delete it. Until then it also keeps your bot's access token and your OpenRouter connection.
- When you delete your account: immediately, we delete your server, its backups and snapshots, and your account. Today some records stay in our database: billing details we received from Stripe (such as your name and email address) and the activity record. We're changing that, and this section will say so when it's done. Deleted data stays in our database backups for up to 30 days.
- Billing records: kept by Stripe for 10 years, as Swiss accounting law requires (Code of Obligations Art. 958f).
- Support conversations: kept in our support tool and in our team's Telegram, and deleted on request.
- Visit recordings: deleted by PostHog after 30 days. Other visit data (pages, clicks): kept for up to a year.
- ChatGPT waitlist: until we send that one email, and at most 24 months after you joined.
06Your rights (GDPR & Swiss FADP)
You can:
- Access the data we hold about you (Art. 15).
- Correct wrong data (Art. 16). Most of it you can edit in Settings.
- Erase your account (Art. 17), in Settings, under Delete account.
- Restrict processing (Art. 18). You can also switch your server off from your dashboard at any time.
- Take your data with you (Art. 20). We export your account data as JSON on request, and we can extract your agent's files from your server on request.
- Object to processing based on legitimate interest (Art. 21).
- Not be subject to solely automated decisions (Art. 22). We don't make any.
- Withdraw consent for anything you consented to.
Email dpo@hostnest.ai from the address on your account. We reply within 30 days.
If you think we've mishandled your data, you can complain to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, in the EU, to your national supervisory authority.
07Where your data lives
Your account record is in Cloudflare's database, hosted in Europe. Cloudflare may process its logs outside the EU. Your server is at Hetzner, in Germany or Finland. PostHog keeps visit data in the EU, in Frankfurt. Some of our providers (for example Cloudflare, Stripe, Resend, Sentry, Google, Telegram and Anthropic) may process data outside Switzerland and the EU. When they do, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (and their Swiss equivalent).
08Security
- HTTPS everywhere.
- Telegram bot tokens and OpenRouter tokens are encrypted at rest (AES-GCM). The key is kept separately, in a secrets store, not in the database.
- Passwords are salted and hashed, never stored in plain text.
- Each server has its own key for talking to our platform, so there's no shared secret across customers.
- We don't log in to your server unless you open a support session from your dashboard. During a session, support has full access to your server, including your agents' notes and chats. Our access key is added when the session opens and removed within about a minute of it ending. A session lasts up to 7 days, and you can close it at any time.
If we discover a breach affecting your data, we'll email you within 72 hours.
09Children
HostNest.ai is not for people under 16. We don't knowingly collect data from anyone under 16. If you think a minor has signed up, email dpo@hostnest.ai and we'll delete the account.
10AI services you connect
Anthropic (Claude). Your agent runs Anthropic's Claude Code on your server, signed in to your own Claude account under your own agreement with Anthropic. Your server sends your messages, the content your agent works with, and its replies directly to Anthropic under that account, so Anthropic knows whose activity it is. Anthropic acts as an independent controller under its own terms and privacy policy. Your Claude settings decide whether Anthropic may use this data for training. For residents of Switzerland and the EEA, that is Anthropic Ireland, Limited, and data may go to Anthropic PBC in the United States and elsewhere.
When you connect Claude, the one-time sign-in code you paste is encrypted in your browser, so only your server can read it. It passes through our platform in that form for a few seconds and is then deleted. Your login token stays on your server. Our platform doesn't send what's on your server to Anthropic. Our own support and operations agents run on Claude under our account (see §4).
OpenRouter (optional). If you connect your own OpenRouter account, your server sends voice messages and text to be spoken to OpenRouter, Inc. (United States). To build your agents' memory search, it also sends the text of your chats and your agents' notes through OpenRouter to an embedding model, only at providers that keep no copy of it. Without OpenRouter, memory search is built on your server and nothing leaves it. OpenRouter and the AI providers it routes to may be anywhere. See OpenRouter's privacy policy.
Telegram. Your messages with your agent travel through Telegram, under Telegram's own terms. We hold your bot's access token, encrypted, so we can run your agent and restore it if your server has to be rebuilt.
If we created your bot for you when you signed up, it is still yours: it appears in your BotFather, and you can rename it or delete it any time. HostNest manages it so your agent can use it, which means we can get a new access token for it ourselves. Deleting the bot ends that. If you created the bot yourself in BotFather, you can revoke its token there at any time.
We don't control how these companies use your data when your agent uses them under your own accounts. For that use, they are not our service providers (see §4).
11Changes to this policy
We'll email account holders at least 14 days before any change that materially reduces your privacy protections. Routine clarifications get a new version number at the top of this page.
12Contact & complaints
General: contact@hostnest.ai
Privacy and data requests: dpo@hostnest.ai
Post: Oqtacore Sàrl, Route de Divonne 44, 1260 Nyon, Switzerland.
This document is provided in English. Translations are for convenience; the English version governs.