Skip to main content
HomeRunner

Privacy Policy

Last Updated: October 21, 2026

HomeRunner (“Service”) is a booking engine platform provided by Hudson Creative Studio (“Company,” “we,” “us,” or “our”). We respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes:

  • The types of information we may collect from you or that you may provide when you visit our website (homerunner.io) or use the Service.
  • Our practices for collecting, using, maintaining, protecting, and disclosing that information.

1. Information We Collect and How We Collect It

We collect several types of information from and about users of our website and Service, including:

  • Information you provide directly — such as your name, email address, phone number, and company details when you create an account, request a demo, or contact us.
  • Booking and property data — when you connect your Property Management System (PMS) to HomeRunner, we process property, reservation, and guest information on your behalf in order to provide booking engine functionality for your website.
  • Third-party service connections — when you connect a third-party service to HomeRunner, such as your PMS or Cloudflare, we store the access tokens or credentials needed to keep that connection working and use them only to provide the Service.
  • Billing information — payments for the Service are handled by third-party payment processors; we do not store full payment card details on our servers.
  • Automatically collected information — such as usage details, IP addresses, and information collected through cookies and similar tracking technologies as you navigate the website or Service.

Our website uses third-party analytics and advertising tools that collect information through cookies and similar technologies. These include Google Analytics and Google Tag Manager (see the Google Privacy Policy), the Meta Pixel (see the Meta Privacy Policy), and Microsoft Clarity, a Microsoft service that captures how visitors interact with our pages, such as clicks and scrolling, so we can improve the site (see the Microsoft Privacy Statement). Our forms use Google reCAPTCHA to prevent spam. You can limit what these tools collect through your browser settings, as described in Section 4 below.

2. How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

  • To provide, operate, and maintain the Service, including processing bookings through your connected PMS.
  • To present our website and its contents to you.
  • To provide you with information, products, or services that you request from us, including customer support.
  • To send you service-related communications, such as account notices and updates to the Service.
  • To fulfill any other purpose for which you provide it.

3. Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

  • To service providers we use to support the Service, such as hosting providers, payment processors, and the Property Management Systems and other third-party services you choose to connect.
  • To an AI assistant you connect to your account, as described in Section 7.
  • To fulfill the purpose for which you provide it.
  • To comply with any court order, law, or legal process, including responding to any government or regulatory request.

4. Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us:

  • Tracking technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent.
  • Marketing communications. You can opt out of promotional emails by following the unsubscribe link included in each message.
  • Access and deletion. You may contact us at the address below to request access to, correction of, or deletion of personal information you have provided to us.

5. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

6. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. The date the privacy policy was last revised is identified at the top of the page.

7. AI Assistants and Connectors

AI assistants, such as Claude (by Anthropic) and ChatGPT (by OpenAI), can connect to HomeRunner through the HomeRunner account connector, which is for HomeRunner customers. You sign in with your HomeRunner account, and your assistant can then answer questions about that account. The connector is read-only. It cannot make, change or cancel a booking, and it cannot take or make a payment.

7.1 The HomeRunner account connector

How a connection is made. A connection exists only after a person signed in to your HomeRunner account approves it on our “Allow access” screen. That screen shows which app is asking and where it will send the approval. We accept connections only from assistant apps we recognize. HomeRunner staff and admin logins cannot use the connector. You can see and remove every connected app in the HomeRunner dashboard under AI assistants.

What a connected assistant can read. Access is read-only, and only to the account that approved it. When you ask a question, the assistant can read:

  • your account overview: account name, plan, team size, and the number of connections, properties and sites;
  • your property management system (PMS) connections: which PMS, the connection name and its sync status (never your PMS credentials or API keys);
  • your properties: names, type, city, region and country (never the street address), capacity, amenities, house rules and cancellation policy;
  • property calendars: availability, nightly prices and minimum stays;
  • your reservations, inquiries and booking requests: dates, status, the property, the party size, amounts and the guest’s name;
  • booking statistics for a date range;
  • your booking websites: name, web address and status.

Guest information. The only guest detail the connector returns is the guest’s name. Guest email addresses, phone numbers, postal addresses and notes are never returned. You decide whether to connect an assistant and what to ask it. You are responsible for using your guests’ information with your chosen assistant in line with your own privacy notices and the laws that apply to you.

What we store, and for how long.

  • The app registration: the app’s name and the address it uses to receive approvals. A registration that is never approved is deleted after 7 days.
  • The approval: which HomeRunner user approved it, what it may do, and when.
  • Access credentials: stored only in hashed form. An access credential lasts 1 hour. A renewal credential lasts up to 30 days and is replaced each time it is used.
  • An activity record for each request the assistant makes: the time, the HomeRunner user and credential it was made with, the app’s name, which tool was used, whether it succeeded, how long it took, a one-way fingerprint of the request details (not the details themselves), a one-way fingerprint of the IP address (not the address itself) and the browser or app identifier. We never store the answer we sent. We keep these records for 90 days to secure the service, investigate problems and enforce usage limits, then delete them.

Usage limits. We limit how many requests each user’s assistants can make, by default 60 a minute and 2,000 a day.

Your choices. You can disconnect an assistant at any time under AI assistants in the HomeRunner dashboard (dashboard.homerunner.io/ai-assistants). Disconnecting immediately stops its access to your account. You can also remove HomeRunner from the assistant’s own settings. To ask about or delete the records described here, contact us at the address below.

7.2 Where the data goes, and your requests

Where the data goes. When an assistant asks HomeRunner a question, we send the answer to the assistant provider. From then on, the provider’s own privacy policy and terms govern that data: Anthropic’s Privacy Policy for Claude, and OpenAI’s Privacy Policy for ChatGPT. HomeRunner does not receive your conversations, prompts, chat history, memory or files from the assistant. We receive only the requests the assistant makes to us.

Private site links. A HomeRunner customer can also give an assistant a private link to the listings on one of their own booking websites. Requests made through a private link are recorded the same way: an activity record with the time, the tool used, whether it succeeded, how long it took, the site concerned, one-way fingerprints of the request details and of the IP address (not the details or the address themselves) and the browser or app identifier, kept for 90 days and then deleted.

Questions and deletion. To ask about or delete the records described in this section, contact us at the address below.

8. Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at: support@homerunner.io.