Privacy Policy

Who is responsible for your information

Hidaku LLC is the legal operator responsible for personal information handled through Rehost and the former Buildify name. This is a change of brand name, not a change of legal operator. The rename does not itself change the purposes for which we collect, use, or disclose your information.

For all existing subscriptions, the name change leaves your subscription and payment arrangements in place. Our Terms of Service and your current agreement explain those arrangements.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, you may contact us at:

Scope of This Privacy Policy

This Privacy Policy applies to personal information collected by Rehost through:

• Our website located at rehost.app
• Any web-based, mobile, or downloadable applications operated by Rehost
• SaaS tools, AI-powered services, beta products, and subscription offerings
• Marketing, promotional, sales, onboarding, or customer support communications
• Interactions with our social media accounts, advertisements, or authorized partners

This Privacy Policy does not apply to third-party websites, applications, integrations, or services that may link to or be accessible from our Services. Rehost does not control and is not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing any information.

Definitions of Personal Information

For purposes of this Privacy Policy, "Personal Information" has the meaning given under applicable law and includes any information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual, including but not limited to:

How We Collect Personal Information

• Directly from you when you register, subscribe, submit forms, or communicate with us
• Automatically through cookies, pixels, log files, analytics tools, and similar technologies
• From service providers and integrations used to operate our Services
• From authorized partners or affiliates acting on our behalf

Self-Serve Business Reviews

When you request a business review, we collect the mobile number you provide and the business, place, or website you select. We use that information to create or reuse a Rehost contact record, record the review request, generate and protect the report, prevent abuse, and respond about that review.

An unlocked report is available through a long, unguessable link. Anyone who receives that link can open the report until it expires, so share it only with people you want to have access. The report does not display your mobile number or place it in the URL.

We use an essential, opaque session cookie on Rehost subdomains for up to 90 days so a returning browser with a directly submitted mobile number can skip the phone step. The cookie does not contain the mobile number or CRM identity, is not readable by browser scripts, and is used only to recognize the protected session.

To protect the review flow, Cloudflare Turnstile processes a verification token and network information. We also use one-way hashed phone and network identifiers with timestamps for rate limiting. Google Places helps resolve the selected business and calculate nearby-search comparisons. We do not store raw Google Places responses in the report snapshot.

Submitting a mobile number for a review does not enroll you in automated marketing text messages. If Rehost offers optional automated marketing messages, we will request separate consent where required.

Cookies and Your Choices

Essential storage supports security, remembers your privacy choice, and preserves the source of a booking during the current visit. Analytics cookies are enabled by default to help us understand and improve website use. You can turn them off at any time by selecting Essential only in the Cookie preferences control. If your browser sends a Global Privacy Control signal, we automatically use essential storage only.

When analytics is on, Google Analytics and Microsoft Clarity may set cookies to measure page use and interactions. We also keep a PII-free first- and last-touch attribution cookie for up to 90 days. It may contain campaign tags, advertising click identifiers, the name of a referring AI assistant, a referral code, referring hostname, landing path, and timestamps; it does not contain your name, email address, phone number, search prompt, or precise location.

When a booking form is submitted, our hosting provider may provide approximate city, region, country, and device type. We store those coarse details with the inquiry to understand market and device performance, but we do not store the visitor’s IP address in the CRM or request GPS location from the browser.

Analytics and Session Data

We use Google Analytics to understand aggregate website use. Analytics is enabled by default and may use cookies and a pseudonymous identifier for measurement. We disable Google Signals and advertising-personalization signals in our site configuration, do not send names, email addresses, or phone numbers to Analytics, and keep advertising storage disabled. If you opt out or use Global Privacy Control, Google Analytics switches to denied-storage mode and does not read or write analytics cookies. You can opt out using our Cookie preferences button or use the Google Analytics opt-out browser add-on.

While analytics is enabled, we also use Microsoft Clarity to capture how visitors interact with our pages, including session replays, heatmaps, and interaction metrics. Clarity masks sensitive content such as form inputs by default and is disabled when you select Essential only or send a Global Privacy Control signal. For more information, see the Microsoft Privacy Statement.

After a successful booking-form submission, we may associate later analytics activity in that browser with an opaque CRM contact identifier while analytics remains on. That identifier is generated by our CRM and is not an email address or a value derived from an email address. We do not send your name, email address, or phone number to these analytics tools.

How We Use Personal Information

• Provide, operate, maintain, and improve the Services
• Process transactions and manage subscriptions
• Communicate with you about a review, request, update, support matter, or service-related notice
• Conduct analytics, research, and internal development
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Enforce our Terms of Service and other agreements
• Comply with legal and regulatory obligations

Billing and subscription information

We use billing and payment providers, including Agree, Stripe, or Whop depending on your plan, to manage subscriptions, collect authorized payments, provide invoices, prevent fraud, and answer billing questions. Enter payment details only through the secure payment link or portal supplied for your plan. Do not send full card numbers by email, text, or a support message.

The company name on a bill may change from Buildify to Rehost. This does not itself create a new use of your personal information or change the legal operator responsible for it.

Disclosure of Personal Information

We may disclose personal information to:

• Service providers and vendors performing services on our behalf
• Analytics, hosting, payment processing, security, and infrastructure partners
• Legal authorities when required by law or to protect rights, safety, or property
• Affiliates or successors in connection with a merger, acquisition, or asset sale

We do not sell personal information as defined under CCPA/CPRA.

Your California Privacy Rights

If you are a California resident, you have the right to:

• Right to Know what personal information we collect, use, and disclose
• Right to Access specific pieces of personal information
• Right to Delete personal information, subject to legal exceptions
• Right to Correct inaccurate personal information
• Right to Opt-Out of any future sale or sharing (if applicable)
• Right to Limit Use of Sensitive Personal Information
• Right to Non-Discrimination for exercising your rights

Canada and cross-border processing

If you are in Canada, you may ask about your personal information, request access or correction, or ask to withdraw consent where applicable law permits. Contact [email protected] with the subject "Privacy request." We will review your request under the laws that apply to your information.

We and our service providers may process personal information in the United States and other countries where we operate. Those countries may have different privacy laws, and information may be accessible to courts, law enforcement, or other authorities under local law. Contact us if you have questions about a provider or processing location. Nothing in this policy limits rights you have under applicable law.

Data Retention & Security

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy. An audit-recognition session lasts up to 90 days, and an unlocked review link may remain available for up to 400 days. The related contact and review activity may be retained longer as part of our ordinary CRM records, subject to applicable law and a valid deletion request. We implement reasonable administrative, technical, and physical safeguards designed to protect personal information.