Security & Account Safety Policy

Effective Date: July 7, 2025

At Bhostd, protecting our community’s safety, trust, and digital well-being is foundational. Our Security & Account Safety Policy outlines how we keep your data safe, your account secure, and your activity monitored for threats — all while empowering you with tools to take control of your digital safety on Bhostd.

Account Creation and Verification

To prevent fraud and ensure trust in our platform, every user must go through our verification process. This includes verifying your phone number, email, and identity as part of our Trust & Verification system. Additional verifications such as government-issued IDs may be required for hosting, booking high-value properties, or responding to security alerts. Users must provide accurate, up-to-date information during sign-up and maintain a complete and honest profile. Bhostd reserves the right to suspend or delete accounts that misrepresent identity or use fraudulent credentials.

Login Credentials and Session Security

You are responsible for keeping your Bhostd login information confidential. Choose a strong password that includes a mix of letters, numbers, and symbols, and avoid reusing passwords from other services. We recommend enabling device-level biometric security such as Face ID or fingerprint unlock for added protection. Bhostd automatically logs out inactive sessions after a certain time window to prevent unauthorized access. Users are notified of logins from new devices or IP addresses through User Notifications.

Data Encryption and Infrastructure Protection

We apply industry-leading encryption (AES-256) to secure your personal data both in transit and at rest. Sensitive fields, including ID documents and payment details, are stored on secure servers with restricted access. All user-to-user messages on Inbox are end-to-end encrypted. Our security infrastructure includes firewall segmentation, DDoS protection, real-time monitoring, and regular third-party penetration testing. Bhostd’s engineering team continuously scans the platform for vulnerabilities using automated tools and manual reviews.

Suspicious Activity Monitoring

To protect users from scams or intrusions, we monitor platform activity using behavioral analytics. Activities such as login anomalies, mass reservation attempts, listing spam, or payout modifications may trigger account review by our Trust & Safety team. In severe cases — including phishing, identity theft, or payment fraud — we may temporarily lock an account and reach out for verification via the Help Center. Users are encouraged to report unusual behavior or impersonation attempts through Support.

Secure Transactions and Payments

All transactions are processed through our PCI-compliant payment gateway. Bhostd does not support or condone offline or direct payments between guests and hosts. Any attempt to transact outside Bhostd (e.g., via Venmo, cash, or bank transfer) violates our Off-Platform Payment Policy and may lead to account termination. Your Payout Preferences and linked bank details are encrypted and protected by two-step verification. You can manage your payouts securely through your Dashboard.

Mobile Security and Notifications

We recommend keeping your device’s operating system and apps updated to the latest version. Through the Notificationssection, users can opt in to receive mobile security alerts, account changes, and suspicious login activity. We also provide the ability to review all recent transactions and trips under Completed TransactionsFuture Transactions, and Your Trips to detect unauthorized changes.

User Responsibilities and Best Practices

Users are expected to:
 

  • Avoid sharing login credentials with anyone

  • Regularly update their passwords and enable biometric security

  • Use secure networks and avoid public Wi-Fi when logging into Bhostd

  • Monitor account activity and report concerns immediately
     

Abuse of the platform, such as identity fraud, phishing attempts, and listing manipulation, is taken seriously. Violations of this policy may lead to investigation, suspension, or permanent ban.

Reporting Security Issues

If you believe your account has been accessed by someone else, act immediately:
 

  • Reset your password via Change Password

  • Check and secure your email and device access

  • Notify our Support for urgent review
     

Our team investigates all security reports within 24–72 hours and will work with you to restore access and prevent recurrence.

Thank you for being part of the Bhostd community and helping us maintain a safe, secure environment for all users.