Effective 3 August 2026
This explains what happens to your data when you use Hosho - the prompt review service (editor and MCP) provided by Hosho Private Limited (UEN 202511998N), 60 Paya Lebar Road, #07-54 Paya Lebar Square, Singapore 409051.
Your email address, via Google sign-in (we never receive your Google password). The prompts you submit, your edits, and the reviews, scores, version history, and session messages created in your workspace. If you connect a GitHub repository, the prompt files we read from it and the pull requests you ask us to open. Basic usage logs (such as sign-ins, review runs, and in-app actions) tied to your email. If you buy a paid plan, we keep a record that links your workspace to your Stripe customer and subscription, together with the plan and its status - never your card details. The only cookies we set are those needed to run the Service - to keep you signed in, to remember which workspace you were last in, and to protect sign-in and connection flows. We set no advertising or cross-site tracking cookies.
We use your data to run the Service: generate and display your reviews, keep your workspaces and settings, prevent abuse, and understand how the Service is used so we can improve it. We do not sell it, share it between customers, use it to train AI models, or use it for advertising.
Running a review sends your prompt text to third-party AI providers, under their own API terms and solely to generate your review. These currently include Anthropic and Google, and models reached through OpenRouter (an aggregator that routes to further providers, such as Z.ai). We change providers and models over time as we tune quality, cost, and availability. The Service runs on Supabase (database and sign-in), Vercel (hosting and cookieless site analytics), Render (hosting), and Google (sign-in). If you buy a paid plan, Stripe processes the payment and issues your invoices; your card details go to Stripe and never to us. Your data is stored and processed primarily in the United States.
From Settings you can delete a workspace, all of your organisation’s data, or your whole account, at any time. Deleting a workspace or your organisation’s data removes that content from our live systems. Deleting your account removes your personal data and access, and anonymises your email address on work your team keeps. Backups age out on their normal cycle.
To access, correct, or delete your data, use Settings or email otto@hoshoai.com - our data protection contact for the purposes of Singapore’s Personal Data Protection Act.
The Service is for business use by people aged 18 or over.
If this statement changes, we will update the date above and tell you about material changes in-app or by email.
Hosho Private Limited (UEN 202511998N) - otto@hoshoai.com