Effective 3 August 2026
This explains what happens to your data when you use Hosho - the prompt review service (editor and MCP) provided by Hosho Private Limited (UEN 202511998N), 60 Paya Lebar Road, #07-54 Paya Lebar Square, Singapore 409051.
Your email address, via Google sign-in (we never receive your Google password). The prompts you submit, your edits, and the reviews, scores, version history, and session messages created in your workspace. If you connect a GitHub repository, the prompt files we read from it and the pull requests you ask us to open. Basic usage logs (such as sign-ins, review runs, and in-app actions) tied to your email. If you buy a paid plan, we keep a record that links your workspace to your Stripe customer and subscription, together with the plan and its status - never your card details. Inside the Service, the only cookies and similar technologies we use are those needed to run it - to keep you signed in, to remember which workspace you were last in, and to protect sign-in and connection flows. We also use Vercel’s site analytics to count visits, which sets no cookies and stores nothing on your device.
Our public pages - pricing, docs, research, this page, terms, security and sign-in - also use Google Analytics, and only if you agree to it in the banner shown there. It sets two cookies, _ga and _ga_B0VNV6DN5P, which tell repeat visits apart, and Google LLC receives that data. You can change or withdraw your answer at any time from the same banner. Decline and no analytics cookies are set. None of this runs once you are signed in and using the Service.
We set no advertising cookies, and nothing that follows you around other companies’ websites.
We use your data to run the Service: generate and display your reviews, keep your workspaces and settings, prevent abuse, and understand how the Service is used so we can improve it. We do not sell it, share it between customers, use it to train AI models, or use it for advertising.
Running a review sends your prompt text to third-party AI providers, under their own API terms and solely to generate your review. These currently include Anthropic and Google, and models reached through OpenRouter (an aggregator that routes to further providers, such as Z.ai). We change providers and models over time as we tune quality, cost, and availability. The Service runs on Supabase (database and sign-in), Vercel (hosting and cookieless site analytics), Render (hosting), and Google (sign-in). If you buy a paid plan, Stripe processes the payment and issues your invoices; your card details go to Stripe and never to us. Your data is stored and processed primarily in the United States.
From Settings you can delete a workspace, all of your organisation’s data, or your whole account, at any time. Deleting a workspace or your organisation’s data removes that content from our live systems. Deleting your account removes your personal data and access, and anonymises your email address on work your team keeps. Backups age out on their normal cycle.
To access, correct, or delete your data, use Settings or email otto@hoshoai.com - our data protection contact for the purposes of Singapore’s Personal Data Protection Act.
The Service is for business use by people aged 18 or over.
If this statement changes, we will update the date above and tell you about material changes in-app or by email.
Hosho Private Limited (UEN 202511998N) - otto@hoshoai.com