Privacy

Privacy Policy

Effective 2026-09-20

Bayit Host is operated by Eyal Samuel Spier. This policy explains how information is used to provide the Bayit Host hospitality-planning service.

Information used by Bayit

Hosts and household members

We process sign-in identity information such as name, verified email, authentication-provider identifiers, household membership and role, household settings, and the hospitality plans created in the service.

Guests

Hosts may enter guest-household and contact details, including names, phone numbers, dietary information and private hosting notes. When a guest responds through a private invitation link, Bayit processes meal choices, adult and child headcounts, dietary information, declines, cancellations, change requests and contributions. Guests do not need an account. If a guest chooses to create or sign in to an account, Bayit stores the verified email and the link between that account and the host’s guest record so future invitations can remember them.

Hospitality plans

Bayit stores occasions, meals, menus, saved dishes and ingredients, contributions, cooking state, reminders and reminder history, hosting history, quantities and shopping-list information.

Why information is processed

Information is used to authenticate hosts; provide household collaboration; create and deliver private invitations; record responses; coordinate meals and contributions; support repeat hosting; operate subscriptions; secure, troubleshoot and improve the service; and meet legal obligations. Bayit also records a small first-touch signup source when supplied through a supported referral or UTM link, so the founder can understand which launch channels lead to real household use. It does not use third-party product analytics, advertising pixels, fingerprinting, session replay, or page-view tracking.

Private invitation links

A guest link contains a high-entropy private token. Bayit stores a one-way token lookup value and protected recovery material where needed by the host. Anyone who receives a valid link may use its narrowly scoped guest functions, so recipients should keep it private. Guest links do not grant access to host-only information.

Service providers and international processing

Bayit uses hosting and server infrastructure and Cloudflare for secure network delivery. Google OAuth may verify host identity, Resend delivers transactional email, and Stripe processes billing when a household purchases Plus. Paid transactions may use Stripe Managed Payments, under which Stripe’s merchant-of-record service processes payment and transaction details and handles applicable indirect taxes, invoicing, disputes, and transaction-level payment support. These providers may process information in countries outside the user’s country under their own safeguards and terms. Bayit does not use third-party product analytics or session replay in v1.

Retention and deletion

Household planning information is retained while the household uses Bayit and as reasonably necessary for service, security, billing, backup and legal purposes. Eligible household owners can export and delete household data. Members can leave; a host can delete their account after ownership obligations are resolved. Backup copies age out under the operational retention schedule rather than being edited in place.

Security

Bayit separates host authentication from guest-token access, scopes application data by household, encrypts or hashes sensitive tokens as appropriate, and limits secrets to server-side configuration. No online service can promise absolute security.

Your choices and requests

Depending on applicable law, you may ask for access, correction, export or deletion of personal information, or object to certain processing. Household export and deletion controls are available to eligible owners. Contact [email protected] for privacy requests.

Contact

Bayit Host is operated by Eyal Samuel Spier, Felsenhofstrasse 14, 8134 Adliswil, Switzerland. General support: [email protected].