Space on Hold

Privacy

This isn't legal advice.

Last updated October 7, 2026. This policy is for Space on Hold at spaceonhold.com, operated by Space On Hold, LLC from Christian County, Missouri.

Who this covers

Two kinds of people show up:

• Owners — the people who run a space and pay for Space on Hold. You are our customer.
• Guests — people who hold a time on your page. They do not get an account. For their name, email, phone, and files, you are in charge. We run the software.

What we collect

Owner accounts

Name, email, password (stored hashed), the space name, host name, timezone, plan, and billing status. Also the hours, rates, house rules, photos, and notes you type.

Billing

Stripe holds card numbers for the subscription and for guest charges. Guest card charges are created on the owner’s connected Stripe account. We keep the plan, the interval, and Stripe customer, subscription, or charge ids. We do not keep full card numbers. Your subscription is separate from a guest’s deposit.

Guest bookings

Name, email, an optional phone, the time, the price, the deposit, files you require, and a typed name on the house rules. A booking link is an unguessable token. We do not give the guest a password.

Technical

Cookies to stay signed in and to stop cross-site form abuse. Server logs, including IP address, time, and URL, to keep the app up and to limit abuse. We don’t run advertising pixels.

Who holds the data

You are in charge of guest data. Space On Hold, LLC is a service provider. We host, copy, and transmit that data only to run, secure, and support the booking, and to follow the law. We do not sell it. We do not use it to train public AI models. You grant us a limited license to process it solely to provide the service.

What we use it for

To run the booking: the public page, the hold, the deposit record, the files, the receipt, and the emails about that booking. To run your account: sign-in, a one-time code by email, password reset, the subscription, and abuse limits. We don’t sell your list. We don’t run ads on your bookings.

Email, not text messages

We email owners and guests about the account and the booking. That mail is about the hold, the deposit, or the sign-in. It is not a newsletter and not an ad.

Space on Hold does not send text messages. A phone number is optional. We store it so you have it. We do not give it to a texting company, and we do not use it for marketing.

Who else sees it

• You, and anyone you let onto the desk.
• The guest, on the token link for their own booking, the receipt, and the visit page when your rules show access notes.
• Stripe — your subscription, and, when you connect it, guest card charges on your connected account.
• Resend — email for sign-in codes, booking mail, and receipts.
• DigitalOcean — the app and the database.
• Cloudflare — DNS, TLS, and the proxy in front of the app.
• Cloudflare R2 — private files and photos, when that storage is turned on. Otherwise those files stay on the server’s private disk.
• Sentry — error reports, only when it is turned on. Those reports leave out tokens, cookies, and request bodies.
• Space on Hold staff, only to run support you ask for, including opening the desk as the owner from the operator portal.

We may disclose information if the law requires it, or to protect the service from abuse.

How long we keep it

While your space is on Space on Hold, we keep the account and the bookings so the desk still works. Write us if you want the space deleted. We will delete or de-identify it in a reasonable time unless we have to keep a record for billing, a legal hold, or abuse. A guest who wants a copy or a deletion of their booking should ask you first. We will help if you ask us.

Your rights

You can ask for a copy, a correction, or a deletion. If a state privacy law applies, including the California Consumer Privacy Act and the California Privacy Rights Act, write us and we will handle a reasonable request. Guests do not get a logged-in portal. They see the token pages for their booking.

Children

Space on Hold is for the owner of a space, not for children. We don’t knowingly collect information from anyone under 13. If we learn we did, we will delete it.

Security

Passwords are hashed. Sign-in codes are emailed and expire. Booking, receipt, and visit links use unguessable tokens. Required files are private. No software is perfectly safe. Tell us if you find a hole.

Changes

If this policy changes in a way that matters, we will update the date here. Keep using Space on Hold after that and you accept the new policy.

Contact

Space On Hold, LLC, PO Box 13, Billings, MO 65610. Email holds@spaceonhold.com. We don’t sell your list.

This policy is for general information. It is not legal advice. Talk to your own lawyer about guest data, tax, and the rental.