Privacy Policy
Last updated: December 22, 2025
ALPHA GAMMA PTE LTD ("Company", "we", "us", or "our"), a company incorporated in Singapore, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Symplehost platform, including our property management system, Symplehost Signal market intelligence tools, and guest portal (collectively, the "Service"). This policy complies with the Singapore Personal Data Protection Act 2012 ("PDPA") and is designed to meet international data protection standards.
1. Data Controller
ALPHA GAMMA PTE LTD is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:
ALPHA GAMMA PTE LTD
Singapore
Email: support@symplehost.ai
Data Protection Officer: dpo@symplehost.ai
2. Information We Collect
We collect different types of information depending on how you interact with our Service:
2.1 Information from Hosts (Property Owners and Managers)
- Account Information: Name, email address, phone number, country, and company details when you register.
- Property Information: Property addresses, descriptions, photos, amenities, pricing, and availability.
- Financial Information: Bank account details for payouts (processed securely by our payment providers; we do not store complete bank account numbers).
- Identity Verification: Government-issued ID or business registration documents when required for verification.
- Communications: Messages exchanged with guests and our support team.
- Booking Data: Reservation details, calendar information, and transaction history.
2.2 Information from Guests
- Contact Information: Name, email address, phone number, and address.
- Booking Details: Check-in/check-out dates, number of guests, and special requests.
- Communications: Messages exchanged with hosts through our platform.
- Stay Information: Feedback, reviews, and any issues reported during your stay.
2.3 Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers, and screen resolution.
- Usage Data: Pages visited, features used, actions taken, and time spent on the Service.
- Log Data: IP address, access times, referring URLs, and error logs.
- Location Data: General geographic location based on IP address (we do not collect precise GPS location).
- Cookies and Tracking: Information collected through cookies, pixels, and similar technologies (see Section 9).
2.4 Information from Third Parties
- Booking Platforms: Reservation and guest data synchronized from connected platforms like Airbnb.
- Payment Providers: Transaction status and payment confirmation from HitPay and Stripe.
- Market Data Providers: Property performance and market analytics data from AirROI for Symplehost Signal.
- Social Login: Basic profile information if you sign in using Google or other social providers.
3. How We Use Your Information
We process your personal data for the following purposes:
3.1 Service Delivery
- Creating and managing your account.
- Processing bookings and facilitating stays.
- Enabling communication between Hosts and Guests.
- Synchronizing data with connected booking platforms.
- Processing payments and managing payouts.
- Providing customer support and responding to inquiries.
3.2 AI-Powered Features
We use artificial intelligence and automated processing to:
- Generate summaries of guest stays and booking history.
- Analyze communications to suggest response templates.
- Provide pricing recommendations based on market data.
- Create performance insights and analytics reports.
- Categorize and organize your content automatically.
3.3 Analytics and Improvement
- Analyzing usage patterns to improve the Service.
- Generating aggregated, anonymized statistics.
- Conducting research and development.
- Testing new features and functionality.
3.4 Legal and Safety
- Complying with legal obligations and regulatory requirements.
- Detecting, preventing, and addressing fraud and security issues.
- Enforcing our Terms of Service.
- Protecting the rights, property, and safety of our users and the public.
3.5 Marketing and Communications
- Sending service-related notifications and updates.
- Providing product news and feature announcements (with your consent where required).
- Conducting surveys and collecting feedback.
4. Legal Basis for Processing
Under the Singapore PDPA and applicable data protection laws, we process your personal data based on:
- Consent: Where you have given clear consent for specific purposes, such as marketing communications or AI feature usage.
- Contractual Necessity: Where processing is necessary to perform our contract with you (e.g., providing the Service).
- Legal Obligation: Where we must process data to comply with legal requirements.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights (e.g., fraud prevention, service improvement).
5. How We Share Your Information
We may share your personal data with the following categories of recipients:
5.1 Between Users
- Host information (name, property details, contact information) is shared with Guests who make bookings.
- Guest information (name, contact details, booking information) is shared with Hosts for reservation management.
- Reviews and ratings may be visible to other users.
5.2 Service Providers
We share data with third-party vendors who provide services on our behalf:
- HitPay & Stripe: Payment processing (we do not share or store your complete payment card details).
- Supabase: Data storage and file hosting.
- AirROI: Market data and analytics for Symplehost Signal.
- Channex: Channel management and OTA integrations.
- Resend: Email delivery services.
- Meta (Facebook/WhatsApp): Messaging integrations where enabled by users.
- Mastra: AI and automation services.
5.3 Connected Booking Platforms
When you connect your account to third-party platforms (e.g., Airbnb), data is synchronized according to their respective privacy policies and your connection settings.
5.4 Legal and Safety Disclosures
We may disclose your information:
- To comply with legal obligations, court orders, or government requests.
- To enforce our Terms of Service and protect our legal rights.
- To investigate potential violations or illegal activities.
- To protect the safety of our users, employees, or the public.
- In connection with a merger, acquisition, or sale of assets (with appropriate confidentiality protections).
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside Singapore, including the United States and countries in Southeast Asia. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Transfers to countries with adequate data protection laws as recognized by applicable regulations.
- Contractual protections with service providers requiring them to protect your data.
- Technical and organizational security measures to protect data during transfer and storage.
By using our Service, you consent to the transfer of your data to these jurisdictions. If you are located in the European Union and we expand our services there, we will implement additional safeguards such as Standard Contractual Clauses.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit using HTTPS/TLS protocols.
- Encryption of sensitive data at rest.
- Secure authentication mechanisms including multi-factor authentication options.
- Regular security assessments and penetration testing.
- Access controls limiting data access to authorized personnel.
- Employee training on data protection and security.
- Incident response procedures for potential data breaches.
Despite our security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents and notifying affected users as required by law.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Active Accounts: Data is retained while your account is active and for a reasonable period afterward to allow for reactivation.
- Booking Records: Retained for 7 years after the booking date for tax, accounting, and legal compliance purposes.
- Financial Records: Retained for 7 years as required by Singapore tax and accounting regulations.
- Communications: Retained for 3 years after the last interaction for customer support and dispute resolution.
- Marketing Preferences: Retained until you withdraw consent or unsubscribe.
- Security Logs: Retained for 2 years for fraud prevention and security purposes.
After the retention period, data is securely deleted or anonymized. You may request earlier deletion of your data, subject to our legal obligations (see Section 10).
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
9.1 Types of Cookies We Use
- Essential Cookies: Required for the Service to function, including authentication and security.
- Functional Cookies: Remember your preferences and settings.
- Analytics Cookies: Help us understand how users interact with the Service.
- Performance Cookies: Monitor Service performance and identify issues.
9.2 Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service. Most browsers allow you to:
- View and delete existing cookies.
- Block third-party cookies.
- Block cookies from specific websites.
- Block all cookies.
- Clear all cookies when you close your browser.
10. Your Rights
Your Data Protection Rights
Under the Singapore PDPA and applicable data protection laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Withdrawal of Consent: Withdraw your consent to processing at any time (this does not affect the lawfulness of prior processing).
- Deletion: Request deletion of your personal data where there is no compelling reason for continued processing.
- Data Portability: Request transfer of your data to another service provider in a commonly used format.
- Objection: Object to processing based on legitimate interests.
- Restriction: Request restriction of processing in certain circumstances.
To exercise these rights, please contact us at dpo@symplehost.ai. We will respond to your request within 30 days. We may need to verify your identity before processing your request. Note that some requests may be subject to limitations based on legal obligations or legitimate business needs.
11. AI and Automated Decision-Making
Important: AI Processing Disclosure
Our Service uses artificial intelligence and automated processing in several ways:
- Guest Summaries: AI analyzes booking history and communications to generate guest profiles and stay summaries for Hosts.
- Smart Responses: AI suggests response templates based on message content.
- Market Analytics: Automated analysis of market data to provide performance insights in Symplehost Signal.
- Pricing Suggestions: AI-powered recommendations based on market conditions and historical data.
These AI features are designed to assist users and do not make fully automated decisions with legal or similarly significant effects. You can opt out of certain AI features through your account settings. If you have concerns about automated processing, please contact us.
12. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at dpo@symplehost.ai. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
13. Third-Party Links and Services
Our Service may contain links to third-party websites and integrate with third-party services. This Privacy Policy does not apply to third-party sites or services. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices of third parties.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
- We will update the "Last updated" date at the top of this policy.
- We will notify you by email or through the Service before the changes take effect.
- For significant changes, we may request your renewed consent.
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
15. Complaints
If you have concerns about how we handle your personal data, please contact us first at dpo@symplehost.ai. We take all complaints seriously and will work to resolve your concerns.
If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore at https://www.pdpc.gov.sg. If you are located in another jurisdiction, you may have the right to complain to your local data protection authority.
16. Contact Us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:
ALPHA GAMMA PTE LTD
Singapore
Email: support@symplehost.ai
Data Protection Officer: dpo@symplehost.ai