Privacy Policy

DhanurGo LLC ("we," "us," or "our") operates HostMetrics (hostmetrics.app), a fleet analytics platform for Turo hosts. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

1. Information We Collect

Account Information

When you create an account, we collect your email address and password (or Google OAuth credentials). We use this solely for authentication and account management.

Fleet Data

You may upload CSV files from Turo containing trip earnings, vehicle information, and related data. This data is stored securely in your account and is only accessible by you. We do not share, sell, or use your fleet data for any purpose other than providing you with analytics.

Banking Data (Plaid)

If you choose to connect a bank account, we use Plaid Inc. to securely access your financial data. Plaid collects your bank credentials directly — we never see or store your bank login information. We receive transaction data (amounts, dates, merchant names, categories) and account balances to provide cashflow analytics. See Plaid's Privacy Policy for details on how they handle your data.

Payment Information (Stripe)

Subscription payments are processed by Stripe Inc. We do not store your credit card numbers or payment details. Stripe handles all payment processing in compliance with PCI DSS standards. See Stripe's Privacy Policy.

Usage Data

We may collect standard usage data such as browser type, device type, pages visited, and timestamps to improve the service. This data is not linked to your personal identity.

2. How We Use Your Information

• To provide, maintain, and improve the HostMetrics service
• To authenticate your account and manage your session
• To process subscription payments through Stripe
• To sync and display your banking data through Plaid
• To send transactional emails (password resets, account verification)
• To respond to support requests via support@hostmetrics.app

We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes.

3. Data Storage & Security

Your data is stored on Supabase (hosted on AWS) with encryption at rest and in transit. We use Row Level Security (RLS) to ensure that your data is only accessible to your authenticated account. All connections are encrypted via TLS/SSL.

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure.

4. Third-Party Services

We use the following third-party services:

• Supabase — database, authentication, and file storage
• Stripe — payment processing
• Plaid — bank account linking and transaction sync (optional)
• Vercel — application hosting
• Resend — transactional email delivery
• PostHog — application error monitoring, product analytics, and (rare) session replay on errors. We record diagnostic info (user ID, request path, browser, stack trace) so we can fix bugs and understand product usage. Form fields are masked by default. Hosted on PostHog Cloud (US region).

Each of these services has its own privacy policy governing how they handle data.

5. Cookies

We use essential cookies only — specifically, authentication session cookies required for you to stay signed in. We do not use advertising or tracking cookies.

6. Data Retention & Deletion

Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, please contact us at support@hostmetrics.app. We will delete your account and all associated data within 30 days of your request.

If you disconnect a bank account through Plaid, we will delete the associated access token and stop syncing transactions. Previously synced transaction data will remain in your account unless you request its deletion.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Disconnect third-party services (Plaid, Stripe) at any time

To exercise any of these rights, contact us at support@hostmetrics.app.

8. Children's Privacy

HostMetrics is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: