A1. Terms of Service

Document ID: HOSTLY-TOS-1.1 | Version: 1.1 (proposed) | Last updated: [[EFFECTIVE-DATE]] | Replaces: HOSTLY-TOS-1.0

Operator: These Terms govern your use of the Hostly websites, apps, matching tools, messaging, event accommodation tools, listing and hosting tools, booking tools and related services (the "Platform"). The Platform is operated by [[ENTITY]], company number [[REG-NO]], of [[ADDRESS]] ("Hostly", "we", "us"). Contact: [[EMAIL]].

Acceptance: By creating an account, using the Platform, requesting or accepting a stay, listing accommodation or creating an event, you agree to these Terms and to the documents listed in s.1.3. If you do not agree, do not use the Platform.

Summary (plain language — not a substitute for the full Terms) (v1.1 — OPS-03)

1. About these Terms

1.1 Roles. One account can hold several roles: Guest, Host and Event Organiser (also called Event Creator). Part 2 applies to everyone. Part 3 adds rules for each role, and those rules apply only while you use that role. Admin privileges are separate from user roles.

1.2 Language. These Terms are published in Hebrew and English. For users in Israel, the Hebrew version prevails if the two differ. [[DECISION: D8]] (v1.1 — OPS-05)

1.3 Documents that form part of these Terms.

(v1.1 — OPS-02)

• Privacy Policy (HOSTLY-PRIV)
• Payments & Payout Terms (HOSTLY-PAY), from the Paid Launch Date
• Cancellation, Refund & Rebooking Policy (HOSTLY-REFUND)
• Fee Schedule (HOSTLY-FEES)
• Community, Review & Safety Standards (HOSTLY-COMMUNITY)
• Creator Subscription Terms (HOSTLY-SUB), for Event Organisers who subscribe
• The Host Compliance Declaration (HOSTLY-HOSTDEC), for Hosts
• The Regional Supplement for your country (HOSTLY-REG)
• Each version is listed in the Legal Version Control Register.

1.4 Mandatory rights. Nothing in these Terms excludes or limits a right or remedy you have under law that cannot be excluded or limited, including your rights under the Israeli Consumer Protection Law, 5741-1981.

Part 2 — Rules for everyone

2. Eligibility and accounts

2.1 You must be at least 18 and legally able to enter a binding contract to:

• create an account;
• request or accept a stay;
• list accommodation;
• receive any payout or credit;
• create an event.

2.2 An adult who arranges a stay that includes a minor is responsible for that minor during the stay.

2.3 You will:

• give accurate, current and complete information and keep it updated;
• keep your login details confidential;
• tell us promptly at [[EMAIL]] if you suspect unauthorised use;
• not impersonate anyone;
• not create an account for another person without their authority.

2.4 We may ask for identity, address, property, tax or payout verification where reasonably necessary for legal, payment, trust, safety or fraud-prevention reasons. We will ask only for what that purpose needs.

3. What Hostly is and is not (v1.1 — PROP-02)

3.1 What we do. Hostly is a technology marketplace and trust-network matching platform. It helps people:

• discover accommodation;
• communicate;
• organise accommodation for events;
• request and offer stays;
• where Paid Stays are available, pay through our licensed payment provider.

3.2 What we are not. Hostly does not own, lease, control or operate any accommodation. Hostly is not a landlord, hotel, travel agent or real-estate broker. The Host supplies the accommodation and is responsible for:

• its legality and accuracy;
• its safety;
• providing it as described.

The Guest is responsible for complying with the booking terms and the House Rules.

3.3 A stay is a licence, not a tenancy. A stay booked through Hostly gives the Guest a temporary, personal permission to occupy the accommodation for the confirmed dates. It does not create:

• a lease or tenancy;
• protected tenancy rights;
• any right to remain after the confirmed check-out time.

3.4 Matching. We use automated and AI-supported tools to rank, match, recommend and detect risk (see Privacy Policy s.9). A match or recommendation is not a guarantee of:

• suitability or safety;
• legality or availability;
• identity or quality.

4. Network and connection information

4.1 To help you judge trust, we may show a limited connection path (for example "You → Friend → Connection → Host") and mutual connections. We do not show:

• your full address book or unrelated contacts;
• your private messages;
• your exact home address.

4.2 You can turn off "show me in network search" in your privacy settings. When it is off, we will not show you in other users' network search results. (v1.1 — PRIV-01)

4.3 Only upload, invite, tag, refer or share another person's personal information where you have their authority and a lawful basis to do so. You must not use network information for:

• unrelated advertising;
• surveillance;
• data brokerage;
• harassment.

5. Bookings and how a stay is confirmed

5.1 Requests. A Guest, or an Event Organiser on a Guest's behalf, may request a stay. The Host decides whether to accept. Hosts approve or decline every request.

5.2 Confirmation. A stay is confirmed only when all of the following are true:

• the Host has accepted;
• for a Paid Stay, the payment has been successfully authorised through `[[PSP]]`;
• the Guest has accepted the booking terms shown at that moment.

The booking screen and the confirmation message will say "Confirmed". (v1.1 — PRIV-01, PAY-01)

5.3 Information shown before you commit. Before a stay is confirmed, we show:

(v1.1 — CONS-02, CONS-03)

• the accommodation description and its approximate location;
• the dates;
• the total price you will pay, including every mandatory fee, or "Free Stay";
• the material House Rules;
• the cancellation terms that will apply;
• for paid Israeli bookings, your statutory cancellation right (Cancellation Policy s.3).

5.4 Who the stay contract is with. The agreement for the stay itself is between the Host and the Guest. Hostly is not a party to it, except for Hostly's own obligations under these Terms and the Payments Terms.

5.5 Free Stays. Free Stays carry no accommodation charge. They are still subject to these Terms, the House Rules, the Community Standards and the free-stay courtesy rules in the Cancellation Policy.

6. Prices, fees and taxes (v1.1 — CONS-03, PAY-01, TAX-01)

6.1 Hostly's fees are set out in the Fee Schedule (A6). In summary:

• Guests pay no Hostly fee.
• Hosts pay a 12.5% service fee on Paid Stays only.
• Listing is free.
• Event Organisers can take an optional subscription (Creator Subscription Terms).

6.2 Referral disclosure. When a Paid Stay comes through an Event Organiser's event, 2.5 percentage points of the Host's 12.5% fee are given to that Event Organiser as subscription credit [[DECISION: D4]]. This does not increase the price the Guest or the Host pays.

6.3 Price display. For users in Israel, prices are shown in New Israeli Shekels (NIS) and include VAT where VAT applies. We may also show other currencies for reference only.

6.4 Taxes. Hosts are responsible for their own taxes on hosting income. Income from paid hosting may be taxable, and the residential-rent exemption may not apply to short-term stays. Hostly does not give tax advice. Hostly or `[[PSP]]` will collect, report or withhold only where the law requires it, and will tell you if it does.

7. Payments and payouts

From the Paid Launch Date, Paid Stays are processed by `[[PSP]]`, a licensed payment service provider, under the Payments & Payout Terms. Hostly never holds Guest money in its own accounts and never stores card numbers. Until the Paid Launch Date, only Free Stays are available. (v1.1 — PAY-02)

8. Cancellations, refunds and rebooking

The Cancellation, Refund & Rebooking Policy applies to every stay. It includes:

• the cancellation tiers;
• your statutory rights;
• Host cancellation consequences;
• the Major Disruption rule.

If a Host cancels, Hostly will make reasonable efforts to help you find another stay. We cannot guarantee that a replacement exists or costs the same. (v1.1 — CONS-02)

9. Private stay information (v1.1 — PRIV-01, SAFE-01)

9.1 Before a stay is confirmed, other users see only an approximate location. The Host's exact address, phone number, door or key codes, alarm details and access instructions are released only to the staying Guest once the stay is confirmed. Hostly's systems enforce this.

9.2 These details are not released to:

• Event Organisers;
• other members of an event;
• other users.

9.3 Anyone who receives these details must keep them confidential and use them only for the stay.

10. Safety and emergencies (v1.1 — PROP-01, SAFE-02)

10.1 Hostly is not an emergency service. In an emergency, call the relevant emergency service first. In Israel, that means: Police 100, Magen David Adom 101, Fire 102. Follow Home Front Command instructions.

10.2 Report serious safety concerns, threats, exploitation, fraud or unlawful conduct to Hostly as soon as reasonably possible, through the in-app report button or [[EMAIL]].

10.3 Safety reports create a review record. Reports are not monitored 24/7 and there is no guaranteed review time. If you are in danger now, in Israel call Police 100, MDA 101 or Fire 102. Outside Israel, contact local emergency services. Filing a report does not automatically suspend an account, issue a refund or cancel a stay. After review, we may:

• restrict communications;
• hide a listing;
• suspend an account (s.18);
• preserve records;
• cancel a stay where permitted;
• contact affected users;
• cooperate with lawful requests from authorities.

10.4 Major Disruptions are dealt with in the Cancellation Policy s.7.

11. Reviews

Reviews must follow the Community, Review & Safety Standards. Only a Guest and Host who had a confirmed stay together can review each other. We do not remove a review just because it is negative. We remove reviews only for the reasons listed in those Standards. (v1.1 — CONS-05)

12. Your content

You keep ownership of what you post. You give Hostly a worldwide, non-exclusive, royalty-free licence to host, copy, display, format and technically process your content. This licence covers only what is needed to operate, secure, improve and promote the Platform, and it respects your privacy settings. The licence ends when your content is removed from active systems, except for copies we must keep for legal, security, fraud, dispute or backup reasons.

13. Prohibited conduct

The full list is in the Community Standards. In particular, you must not:

(v1.1 — DIG-01)

• commit fraud, scams or impersonation, launder money or abuse payments;
• threaten, harass or exploit anyone, traffic people, discriminate unlawfully (s.15.5) or commit serious abuse;
• scrape the Platform, stuff credentials, spread malware, attempt denial of service, probe security without permission, or get around access controls;
• use another user's data for unrelated marketing, surveillance, resale or profiling;
• list accommodation without legal authority or a required licence or registration;
• manipulate reviews, identity, availability, prices, transaction records or network connections;
• arrange payment outside Hostly for a stay found on Hostly where Paid Stays are available;
• send messages or create notifications that imitate Hostly, or that use Hostly to send spam.

14. Third-party services

The Platform uses third-party providers for:

• payment;
• maps;
• bot protection;
• email;
• hosting;
• similar services.

They are listed in the Privacy Policy s.6. Their own terms may also apply. Hostly remains responsible for the obligations the law places on Hostly.

Part 3 — Role terms

15. Host terms (v1.1 — OPS-02, PROP-01, PROP-02, SAFE-03)

15.1 Your authority. When you list or accept a stay, you confirm that you have the right to offer the accommodation. That includes, where relevant:

• consent from your landlord;
• consent from the mortgage lender;
• consent from the building or condominium committee (bayit meshutaf).

You also confirm that you have completed the Host Compliance Declaration (A9) and that it remains true.

15.2 Compliance. You will comply with the law and binding rules that apply to your property and the stay, including:

• municipal and planning rules;
• building bylaws;
• tax;
• insurance;
• fire, gas and electrical safety;
• occupancy limits.

15.3 Accurate listing. You must describe these accurately:

• the accommodation type and sleeping arrangements;
• capacity;
• approximate location;
• accessibility;
• known hazards;
• House Rules;
• any mandatory charges.

15.4 Shelter (mamad / miklat). In Israel, you must state in your listing whether:

• the accommodation has a protected space (mamad);
• or the nearest shelter (miklat) or protected area can be reached within the Home Front Command warning time for your area.

You must show Guests where it is on arrival.

15.5 Cameras.

• Recording devices are never allowed in bedrooms, bathrooms or any sleeping area.
• Any camera in another indoor area, or covering an outdoor area Guests use, must be disclosed in the listing before booking.
• Undisclosed or prohibited cameras lead to removal from Hostly.

15.6 House Rules. You may set reasonable House Rules and must show them before booking. They may include religious observance in your home, such as kashrut in the kitchen or Shabbat observance. House Rules must not be used to discriminate unlawfully.

15.7 Non-discrimination. You must not refuse, cancel or treat a Guest differently because of a ground protected by the Prohibition of Discrimination in Products, Services and Entry into Places of Entertainment and Public Places Law, 5761-2000. Those grounds include:

[[COUNSEL: whether, and how far, this Law binds hosts renting rooms in their own home; whether a "shared home" carve-out is lawful]]

• race, religion or religious group, nationality or country of origin;
• sex, sexual orientation or personal status;
• parenthood or age;
• disability;
• outlook or political affiliation;
• place of residence;
• military or reserve service.

15.8 Accepting and cancelling. Accept or decline requests promptly. Cancelling a confirmed stay seriously harms Guests, especially for events. The consequences are in the Cancellation Policy s.5.

15.9 Safety and standards.

• Keep the accommodation reasonably safe and clean.
• Provide working access at the agreed time.
• Disclose any known risk a reasonable Guest would need to know.

15.10 Insurance. Hostly does not provide insurance for Hosts. Many home-insurance policies exclude paying guests. Check your policy before hosting a Paid Stay.

15.11 Guest data. Use Guest information only to provide the stay. Do not keep it longer than needed, and do not use it for marketing.

15.12 Listing action by Hostly. We may restrict or remove a listing where:

We will tell you why (s.18).

• required information is missing or invalid;
• an authority requires it;
• we reasonably believe it creates a legal, fraud or safety risk, or a material risk to consumers.

16. Guest terms (v1.1 — OPS-02)

16.1 The lead Guest. The Guest who books, the lead Guest, is responsible for everyone in their party, including children, to the extent the law allows.

16.2 Conduct. You will:

• use the accommodation lawfully and with care;
• follow the confirmed booking terms, occupancy limit and House Rules;
• not host parties or events in the accommodation unless the Host agrees in writing.

16.3 Safety. On arrival, find out where the mamad or nearest shelter is, and follow Home Front Command instructions.

16.4 Confidentiality. Do not share access codes, key instructions or the exact address with anyone who is not part of your confirmed party.

16.5 Problems and damage.

• Report a material problem promptly (Cancellation Policy s.6).
• Tell the Host and Hostly about any damage you cause.
• Damage claims are handled under the Payments Terms s.10. No charge is made to your card for damage unless you have agreed to it or the law allows it.

16.6 Free Stay courtesy. Free Stays rely on goodwill. Please cancel at least 72 hours before check-in so the Host and the event can plan [[DECISION: D6]].

17. Event Organiser terms (v1.1 — OPS-02, PRIV-01, CONS-03)

17.1 What you can do. Event Organisers can:

• create an event;
• invite participants;
• suggest Hosts;
• track accommodation status, for example "18 of 30 guests placed".

17.2 Participant data.

• You may upload or invite only people you have authority to invite.
• Use their details only to coordinate accommodation for your event.
• Hostly will send each invited person the Notice to Invited Event Participants (A10).
• Upload the minimum about children: a first name and an age band is enough.

17.3 What you will not see. As an Event Organiser you will not receive:

• any Host's exact address, phone, door or access codes;
• any participant's or Host's email address or phone number, unless that person chooses to share it with you;
• private Guest/Host messages;
• payment information, identity documents or safety reports.

You will see placement status and the information each participant chooses to share with you.

17.4 Adding Hosts and members.

• A Host's listing joins your event only if the Host accepts your invitation.
• People join your event only through an invitation they accept.

17.5 No steering. Do not pressure participants towards Paid Stays or away from Free Stays, or towards any Host for your own benefit. The referral credit in s.6.2 is disclosed to Guests and Hosts.

17.6 After the event. Participant data you uploaded is archived and anonymised [[DECISION: 90 days]] after the event ends. Records Hostly must keep under the Privacy Policy s.11 are the exception.

17.7 Subscriptions (proposed, not yet active). Event Organiser paid plans, when launched, are recurring monthly subscriptions governed by the Creator Subscription Terms (A7). The approved USD monthly tiers are $49 for 0–50 distinct joined users, $99 for 51–150, and $199 for 151 or more. The paid subscription begins only on the organiser's express activation, including with zero users; it renews monthly unless cancelled. A user counts once per organiser per billing period across all events; a join continues to count for that billing period even after leaving. Users still joined at renewal count in the new period. Tier increases take effect at the next monthly renewal, with advance notification, not as mid-cycle charges. Billing and acceptance controls remain inactive pending approved checkout, tax treatment, payment provider and legal sign-off.

17.8 No guarantee. Hostly does not guarantee that every participant will be matched or confirmed.

Part 4 — Enforcement, liability and law

18. Suspension, removal and termination (v1.1 — SAFE-04)

18.1 We may restrict, suspend or terminate an account or listing where reasonably necessary because of:

• a material breach of these Terms;
• a legal requirement;
• fraud;
• a safety risk;
• non-payment;
• repeated Host cancellations;
• an invalid listing;
• misuse of personal information.

18.2 Unless the law prevents it, or a warning would create a safety or fraud risk, we will:

• tell you what we are doing and the main reason;
• give you a chance to respond;
• let you ask Hostly to review the decision at [[EMAIL]] within 14 days. This inbox is not monitored 24/7 and there is no guaranteed response time, subject to any applicable legal deadline.

18.3 You may close your account at any time in Settings. Confirmed stays must be cancelled under the Cancellation Policy. See Privacy Policy s.11 for what we keep.

19. Disclaimers

We operate the Platform with reasonable care and skill. We do not independently verify every user, identity, listing, property condition, connection or statement unless we say so. We do not guarantee that the Platform will always be available. This section does not limit any right you have under s.1.4.

20. Liability (v1.1 — CONS-01)

20.1 What we never exclude. Nothing in these Terms limits liability for:

• death or personal injury caused by negligence;
• fraud or deliberate misconduct;
• any liability that cannot lawfully be limited.

20.2 Cap. Subject to s.20.1, each party's total liability to the other for any claim relating to the Platform is limited to the greater of:

• (a) the fees that user paid to Hostly in the 12 months before the claim arose; or
• (b) NIS 2,000.

This cap applies equally to Hostly and to you [[DECISION: D7]]. It does not limit:

• a Guest's refund rights under the Cancellation Policy;
• a Host's right to receive a payout that is due.

20.3 Indirect loss. Neither party is liable for loss that was not reasonably foreseeable when you accepted these Terms.

20.4 Hostly force majeure. Hostly is not liable for failure or delay caused by events beyond its reasonable control, such as:

• war;
• security escalation;
• a large-scale outage of a third-party provider.

Hostly will take reasonable steps to reduce the impact. This clause does not remove a Guest's refund rights under the Cancellation Policy s.7.

21. Indemnity (Hosts and business users only)

If you are a Host or business user, you are responsible for losses, claims, fines and reasonable costs that third parties bring against Hostly where they are caused by your:

• unlawful listing;
• lack of authority to offer the property;
• breach of licensing or tax obligations;
• infringement;
• intentional misuse of the Platform.

The indemnity covers these only to the extent your breach or fault caused them. Consumers do not give Hostly any indemnity.

22. Changes to these Terms (v1.1 — CONS-04)

22.1 Each version has a version number and date. All past versions are kept and available on request.

22.2 We will give at least 30 days' notice by email and in-app before a material change takes effect. The exception is a change required by law or urgently needed for security, which may take effect sooner with notice.

22.3 Confirmed stays continue under the terms you accepted when you booked.

22.4 If you do not accept a material change, you may close your account before it takes effect. We may ask you to accept the new version before your next booking, listing, payout or event action.

22.5 We record which version you accepted, your role, and the date and time. (v1.1 — OPS-04)

23. Governing law and disputes (v1.1 — CONS-01)

23.1 Law. For users in Israel, these Terms are governed by the laws of the State of Israel.

23.2 Courts. Disputes will be heard by the competent courts in Israel, without derogating from any jurisdiction conferred by law, including the jurisdiction of the Small Claims Court.

23.3 Complaints first. Please contact us first at [[EMAIL]]. This inbox is not monitored 24/7 and there is no guaranteed response or resolution time, subject to any applicable legal deadline. This does not prevent you from going to court or to a regulator.

23.4 Users outside Israel: see the Regional Supplement for your country. Until Hostly launches there, it is not available in that country (Supplements, Part B/C).

24. Contact

[[ENTITY]], [[ADDRESS]] · [[EMAIL]]

---

A2. Privacy Policy

Document ID: HOSTLY-PRIV-1.1 | Version: 1.1 (proposed) | Last updated: [[EFFECTIVE-DATE]] | Replaces: HOSTLY-PRIV-1.0

Who we are. [[ENTITY]], company number [[REG-NO]], of [[ADDRESS]] ("Hostly", "we") is the database owner / controller of personal information processed through the Hostly Platform. Privacy contact: [[PRIVACY-OFFICER]], [[EMAIL]]. (v1.1 — CORP-01, PRIV-02)

This Policy explains:

• what we collect;
• why we collect it;
• who we share it with;
• how long we keep it;
• your rights.

It applies to:

• Guests, Hosts and Event Organisers;
• people invited to an event;
• anyone who contacts our support or safety teams.

1. Summary

2. Is giving us information required? (v1.1 — PRIV-02)

There is no legal obligation to give us personal information. Some information is necessary to use a feature:

• name and email to create an account;
• property details to list;
• payout details to receive payouts;
• payment through `[[PSP]]` for a Paid Stay.

If you don't provide it, you can't use that feature. Everything marked "optional" in the app can be left blank.

3. Information we collect

4. Specially sensitive information (v1.1 — PRIV-02)

Some information is specially sensitive under Israeli law and needs extra care.

4.1 Exact address and access details.

• Stored separately from listings.
• Shown only to the staying Guest once the stay is confirmed (Terms s.9).
• Not shown to Event Organisers or other users.
• Public maps use approximate locations only.
• Photos you upload have location (GPS) metadata removed before they are stored.

4.2 Religious-practice preferences (for example kashrut or Shabbat observance in a home):

• These are optional.
• They are used only to match Guests and Hosts and to display House Rules.
• They are collected only with your explicit consent, which you can withdraw in Settings.
• They are never used for advertising or to rank people.

4.3 Location data is used only to show approximate listing locations and nearby stays.

4.4 Children.

• Accounts are for adults only.
• For children in a travelling party or on an event list, we collect only a first name and an age band unless more is needed for safety.
• We do not profile children.

4.5 Accessibility or health-related needs you choose to share are used only to find suitable accommodation, and only with your consent.

5. Why we use information and on what basis

Where we rely on consent, you can withdraw it at any time for the future.

6. Who we share information with (v1.1 — PRIV-02)

6.1 Service providers (they process data for us under contract and access controls):

6.2 Other users, strictly by role:

6.3 Authorities, courts and advisers, where the law requires it or it is needed to establish, exercise or defend legal claims. We review every request and disclose only what is required.

6.4 A buyer or successor of Hostly's business, under confidentiality, with notice to you.

6.5 We do not sell personal information.

7. Network privacy

Hostly is built around trusted networks, so we minimise what the network reveals:

• We show a connection path only to help you judge trust. We never show anyone's full contact list.
• You can opt out of appearing in network search (Terms s.4.2).

8. Messages

Messages are visible to the participants in the conversation. Hostly staff may access a conversation only to:

• handle a report or dispute;
• prevent fraud;
• meet a legal obligation.

Each such access is logged.

8A. Voice typing (v1.1 — proposed, pending legal approval)

Some text boxes offer optional voice typing. It only starts when you tap the microphone, and the first time Hostly explains how it works before your device asks for microphone permission.

• Hostly uses the speech recognition built into your browser or device. Hostly does not record, upload or store audio.
• Your browser's provider may process your speech to produce text — for example Google for Chrome and the Hostly Android app, Apple for Safari, or Microsoft for Edge — under that provider's own privacy terms.
• Only the resulting text is placed in the box. It is treated like typed text: you can edit or delete it, and nothing is sent until you choose to send it.
• Hostly remembers on your device that you saw the explanation. You can withdraw microphone permission at any time in your browser or device settings.

9. Hostly Intelligence and automated decisions (v1.1 — DIG-03)

9.1 What it does. Hostly Intelligence is our AI-supported search and matching assistant. It suggests stays and Hosts from what you type and from listing information.

9.2 What it never uses. It never uses, or infers, any of these to rank or exclude people:

• religion, ethnicity or nationality;
• sex or sexual orientation;
• disability or political opinion.

Optional preferences you set (s.4.2) are used only as filters you control.

9.3 Boundaries. It respects the same visibility rules as the rest of the Platform. It cannot reveal exact addresses or contact details, or other users' private preferences.

9.4 People make the decisions. No decision with a significant effect on you (for example account suspension or refusing a refund) is made only by automated means. A person reviews it, and you can ask for that review at [[EMAIL]].

10. Transfers outside Israel (v1.1 — PRIV-02)

Some providers in s.6.1 process data outside Israel. We transfer personal information abroad only in line with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. This means:

[[COUNSEL: confirm transfer basis per provider]]

• either to countries whose law gives adequate protection;
• or under a written commitment from the recipient to protect the data and not pass it on.

11. How long we keep information (v1.1 — PRIV-02, PRIV-04)

Never delete — archive. Hostly archives or anonymises records rather than destroying booking history. Closing your account removes your profile from public view and anonymises your personal details. The legal and financial records above are kept and restricted.

12. Your rights (v1.1 — PRIV-05)

You can ask to:

• see the information we hold about you (right of access);
• correct it;
• delete it, or delete information that is not needed;
• withdraw consent;
• object to direct marketing.

How to ask:

• In Settings → Privacy, or at [[EMAIL]].
• We will verify your identity and reply within [[30]] days.
• If we refuse, we will explain why and how to appeal.

Complaints:

• You can complain to us first at [[EMAIL]].
• You can also complain to the Privacy Protection Authority (Israel) at any time.

13. Security (v1.1 — PRIV-03)

We use safeguards appropriate to the risk, including:

• role-based access rules enforced in our database;
• encryption in transit;
• restricted staff access;
• [[ONLY IF TRUE AT LAUNCH: multi-factor authentication for administrators; security event logging]];
• backups;
• vulnerability management.

We follow the Israeli Privacy Protection (Data Security) Regulations, 5777-2017. No system is perfectly secure.

14. Security incidents

We keep an incident-response procedure. If a breach affects your personal information, we will:

• notify the Privacy Protection Authority where the law requires;
• notify you where the law requires or it helps you protect yourself.

15. Cookies and marketing

Cookies: see the Cookie Policy.

Marketing:

• We send marketing only with your prior consent, as required by the Communications Law (Telecommunications and Broadcasting), 5742-1982, s.30A.
• Every marketing message identifies Hostly as the sender and includes an unsubscribe link.
• Service messages about your bookings, safety and account are not marketing. (v1.1 — DIG-01)

16. Changes

We version this Policy and keep all past versions. We will give at least 30 days' notice of material changes by email and in-app.

17. Contact

[[PRIVACY-OFFICER]], [[ENTITY]], [[ADDRESS]] · [[EMAIL]]

---

A3. Payments & Payout Terms

Document ID: HOSTLY-PAY-1.1 | Version: 1.1 (proposed) | Applies from: the Paid Launch Date announced in-app [[DECISION: D3]] | Replaces: HOSTLY-PAY-1.0

Before the Paid Launch Date, only Free Stays are available and these Terms have no effect. (v1.1 — PAY-02)

1. Who handles your money (v1.1 — PAY-02)

1.1 Payments for Paid Stays, and payouts to Hosts, are processed by [[PSP]], a payment service provider licensed under [[COUNSEL: the Payment Services and Payment Initiation Law, 5784-2023 / applicable licence]]. `[[PSP]]` contracts directly with you for the payment service. Its terms apply alongside these Terms.

1.2 Hostly never holds Guest money in its own accounts.

• Hostly does not offer a wallet, stored value, escrow or money transfers between users.
• Hostly never sees or stores full card numbers or CVV codes.

2. What the Guest pays

2.1 The Guest pays the total price shown at checkout. That total includes:

• the accommodation price set by the Host;
• VAT where it applies;
• any mandatory charge the Host has disclosed.

Guests pay no Hostly fee. Optional extras, if any, are shown separately and are never pre-selected.

2.2 Currency.

• For stays in Israel, the price is charged in NIS.
• If your card is in another currency, your bank may charge conversion fees. Hostly does not control those fees.

2.3 Locked price. The price is calculated by Hostly's servers and fixed when the Host accepts the request. After that, the stay's dates, listing, party size and currency cannot change without a new request and a new price. (v1.1 — PAY-01; Engineering P3)

2.4 Authorisation. When you confirm a Paid Stay, you authorise `[[PSP]]` to charge the total shown. A stay is confirmed only after the payment succeeds (Terms s.5.2).

3. What the Host receives

3.1 The Host receives the accommodation price minus Hostly's 12.5% service fee (Fee Schedule A6). For example, on a NIS 1,000 stay the Host receives NIS 875.

3.2 Payout timing. Payouts are released [[DECISION: 24 hours after the Guest's scheduled check-in]], subject to:

Bank processing times are outside Hostly's control.

• s.5 (holds);
• [[PSP]]'s schedule.

3.3 Payout statuses. Your payout moves through these statuses: pending → eligible → processing → paid. It can also be failed or held. You will always see which status it is in.

4. Host verification (KYC)

To receive payouts, a Host must complete `[[PSP]]`'s identity and payout-account checks. These may include:

• name and date of birth;
• ID or business number;
• address;
• bank account;
• tax details.

Paid hosting is not available until verification is complete.

5. Holds, reversals and offsets

Hostly or `[[PSP]]` may delay, hold or reverse a payout only where reasonably necessary to deal with:

• a refund the Guest is entitled to;
• a chargeback;
• suspected fraud;
• a legal order;
• an open safety case;
• a `[[PSP]]` requirement.

We will tell the Host the reason and the expected timing.

6. Refunds (v1.1 — CONS-02; Engineering P3)

6.1 Refunds follow the Cancellation, Refund & Rebooking Policy. They are returned to the original payment method through `[[PSP]]`.

6.2 Every refund is recorded with matching adjustments to:

The records always balance.

• the Host's share;
• Hostly's fee;
• any referral credit.

6.3 A refund for the same cancellation can only be issued once.

7. Hostly-funded goodwill refunds

7.1 Hostly may give a Guest a goodwill refund. If Hostly asks the Host to fund part of it, Hostly will:

• explain the reason against the criteria in the Cancellation Policy s.6;
• give the Host 48 hours to respond with evidence before any amount is deducted.

7.2 A Host who disagrees may ask for review under Terms s.18.2.

8. Chargebacks and disputes

Hostly and `[[PSP]]` may use booking, messaging, verification and transaction records to respond to a card dispute. The Host bears a reversed amount only where the card-network rules or the law place it on the Host.

9. Fraud and prohibited transactions

Hostly or `[[PSP]]` may decline, pause or cancel a transaction where there is a reasonable concern about:

• fraud or account takeover;
• sanctions or money laundering;
• a stolen card;
• prohibited activity.

10. Damage (v1.1 — carried from 27-09 review)

10.1 Hostly does not take security deposits at launch.

10.2 A Host who believes a Guest caused damage must submit a claim through Hostly within 14 days of check-out, with evidence (photos and costs). The Guest has 72 hours to respond.

10.3 Hostly will help the parties agree. A Guest's card is charged for damage only if the Guest agrees, or as allowed by law or a court decision.

11. Off-platform payments

Where Paid Stays are available, Hosts and Guests must not arrange payment outside Hostly for a stay found on Hostly. Hostly cannot protect payments made outside the Platform.

12. Taxes and invoices (v1.1 — TAX-01)

12.1 Hostly issues the Host a tax invoice or receipt for Hostly's service fee [[COUNSEL/ACCOUNTANT: VAT treatment of the fee]].

12.2 Hosts are responsible for their own tax on hosting income. Short-term rental income in Israel is often treated as business income, and VAT registration thresholds may apply.

12.3 Hostly may collect and report Host and transaction information where tax law requires it.

13. Changes

Material changes follow Terms s.22: 30 days' notice, and confirmed stays are protected.

---

A4. Cancellation, Refund & Rebooking Policy

Document ID: HOSTLY-REFUND-1.1 | Version: 1.1 (proposed) | Last updated: [[EFFECTIVE-DATE]] | Replaces: HOSTLY-REFUND-1.0

The rule is shown before you book. The cancellation rule below is shown on every booking screen and in the confirmation. If the law gives you a better right, you get the better right. (v1.1 — CONS-02)

1. Summary

All times are Israel time, counted from the listing's check-in time. [[DECISION: D5, D6]]

2. Guest cancellation of a Paid Stay

2.1 Cancel in the app. Your refund is calculated automatically, at the moment you cancel, from the rule in s.1. That rule is fixed in your booking when it is confirmed.

2.2 Only the accommodation amount is refundable under the tiers. There is no Hostly fee for Guests to refund.

2.3 Cancelling and refunding happen together, and a cancellation can be refunded only once.

3. Your statutory right to cancel (Israel) (v1.1 — CONS-02)

3.1 If you booked a Paid Stay online (a distance transaction), the Consumer Protection Law, 5741-1981, s.14C and the Consumer Protection (Cancellation of Transaction) Regulations, 5771-2010 apply. Under them, you may cancel:

• within 14 days of making the booking;
• provided the cancellation is made at least 7 days, not counting rest days, before check-in.

The cancellation fee is the lower of 5% of the price or NIS 100.

3.2 Senior citizens, people with disabilities and new immigrants may have an extended period to cancel, as set out in the law. [[COUNSEL: confirm the scope and conditions of the extended period for online accommodation bookings]]

3.3 If this right gives you a larger refund than s.1, you receive the larger refund.

3.4 To cancel, use the in-app cancel button or email [[EMAIL]] with your booking number.

4. Free Stays (v1.1 — PROP-01)

4.1 Free Stays have no charge and so no refund.

4.2 Because Free Stays rely on goodwill and events depend on them, please cancel at least 72 hours before check-in where possible. No financial penalty applies. Repeated intentional no-shows or abusive cancellations may be reviewed case by case; any future strike, suspension or appeal mechanism requires a separately approved policy and verified implementation. [[DECISION: D6/D12]]

4.3 Emergency cancellations and Major Disruptions must not trigger punitive enforcement. Provide a fair opportunity for the member to explain the circumstances before adverse moderation action.

5. Host cancellation (v1.1 — carried from 27-09 review)

5.1 If a Host cancels a confirmed Paid Stay, the Guest receives a 100% refund. Hostly will make reasonable efforts to help the Guest find another stay (s.8).

5.2 Proposed consequences for Hosts, NOT APPROVED OR ACTIVE (require policy approval, payment activation, legal review and corresponding product implementation; never apply in a Major Disruption or documented emergency):

5.3 For Free Stays, Host cancellations follow the courtesy and case-review provisions in s.4, not an automatic strike rule.

6. Problems on arrival (v1.1 — OPS-03)

6.1 If the accommodation is materially different from the listing, unsafe, or not accessible as promised, tell the Host and Hostly within 24 hours of discovering the problem, with photos if you can.

6.2 Hostly will:

- rebooking help; - a partial refund; - a full refund for the unused nights.

• contact the Host;
• where the problem is not fixed within a reasonable time, offer one of the following, depending on how serious it is:

6.3 Minor differences of taste that do not depart materially from the listing do not give a refund right.

6.4 No access: if you cannot get in at the agreed time because the Host did not provide working access, contact the Host and Hostly immediately. If access is not resolved within 2 hours, Hostly treats the stay as failed: you receive a full refund and rebooking help.

7. Major Disruptions (v1.1 — PROP-01, SAFE-02)

7.1 A Major Disruption is any of the following, where it affects the stay's location, the Guest's travel to it, or the linked event:

• war or a security escalation;
• a declared state of emergency;
• Home Front Command restrictions on movement or gatherings;
• closure of Ben Gurion Airport or of the Guest's travel route;
• a natural disaster;
• a government order preventing the stay.

7.2 During a Major Disruption:

• the Guest or the Host may cancel;
• the Guest receives a 100% refund of anything paid;
• the Host pays no fee and faces no cancellation penalty;
• the Guest faces no cancellation penalty.

7.3 Hostly may cancel affected stays itself where staying would be unlawful or unsafe.

7.4 This section adds to, and never removes, any statutory right.

8. Rebooking help

"Host cancels? We help you find another stay" means Hostly will make reasonable efforts to identify available alternatives on Hostly, prioritising stays near the same event. We cannot guarantee that a replacement Host will accept or that the price will be the same.

[[DECISION: whether Hostly funds any price difference — if yes, state the cap here]]

9. Event cancelled or postponed by the Organiser

If the Event Organiser cancels or moves the event, Guests may cancel linked stays under s.1. [[DECISION: D13 — proposed default: standard tiers apply; Hosts are encouraged but not required to refund in full; alternatively treat as Major Disruption]]

10. Refund method and timing

Refunds go back to the original payment method through `[[PSP]]`. They are started within 3 business days of the cancellation or decision. Your bank may take longer to show them.

11. Abuse

Do not fabricate problems, damage, non-arrival or evidence. We investigate suspected refund abuse and may act under Terms s.18.

12. Mandatory rights

Nothing in this Policy limits a right you have under law that cannot be limited.

---

A5. Cookie Policy

Document ID: HOSTLY-COOKIE-1.1 | Version: 1.1 (proposed) | Last updated: [[EFFECTIVE-DATE]] | Replaces: HOSTLY-COOKIE-1.0

1. What these technologies are

Cookies are small files stored on your device. Similar technologies include:

• local storage;
• session storage;
• pixels;
• SDK identifiers.

We call them all "cookies" here.

2. Our approach (v1.1 — DIG-02)

2.1 We use only the cookies that the Platform needs to work, plus analytics only if you agree.

2.2 We do not use advertising or cross-site tracking cookies.

2.3 Our cookie banner lets you accept or reject optional cookies with one click each. You can change your choice any time in Settings → Cookies.

3. Cookie inventory (v1.1 — DIG-02)

The table below is generated from, and must be kept in line with, the production cookie inventory. [[ENGINEERING: complete and verify every row from production before publication — Part D, BC-12]]

4. Third parties

Third-party cookies are listed above. Their providers' privacy notices also apply. We add any new provider to this table before turning it on.

5. Browser controls

You can block or delete cookies in your browser. Blocking strictly necessary cookies may stop sign-in or maps from working.

6. Changes

We update this Policy and the table whenever our technology changes, and we version each change.

---

A6. Fee Schedule — NEW

Document ID: HOSTLY-FEES-1.0 | Version: 1.0 (proposed) | Last updated: [[EFFECTIVE-DATE]] (v1.1 — CONS-03, PAY-01)

How the 12.5% may be shared (proposed for a future paid launch). If the referral-credit programme is approved, an Event Organiser may receive 2.5 percentage points of the Host's 12.5% fee as a credit against eligible future Hostly charges [[DECISION: D4]]. Hostly would retain 10%. The Guest's price and the Host's payout would be unchanged. No such fees or credits apply while paid stays are disabled.

VAT. Prices for users in Israel are shown in NIS and include VAT where VAT applies.

Changes. Fee changes take effect only after 30 days' notice. They never apply to stays already confirmed.

---

A7. Creator Subscription Terms — NEW

Document ID: HOSTLY-SUB-1.0 | Version: 1.0 (proposed) | Applies from: a future, separately approved Paid Launch Date only. Until then, plans are granted by Hostly admin and no one is charged. Monthly billing is agreed; the payment provider and tier-change mechanics are not approved. [[DECISION: D11]]

1. Plans

Event Organiser plans are monthly recurring subscriptions tiered by unique users who join at least one of the organiser's events during the monthly billing period. Each user counts once for that organiser in that period, even if they join several events. The first join activates one seat for the remainder of that monthly billing period, and leaving does not remove that seat or prorate it. Sending an invitation alone does not count. Public headline: From $49. The organiser dashboard must clearly show the current counted users, plan tier and applicable limit. Monthly tiers: Starter 0–50 users $49; Growth 51–150 users $99; Large 151+ users $199. Crossing a tier threshold does not increase the current month's charge. The next tier and price are displayed and a friendly heads-up notification is sent promptly, stating the next renewal date and expected higher monthly price. Higher pricing takes effect only at the next monthly renewal, using the applicable renewal seat count. [[DECISION: billing-anniversary edge cases, NIS price inclusive of VAT and downgrade policy.]] Before payment activation, checkout must clearly state the monthly price, taxes, included users, renewal terms and limits, and send email confirmation.

2. Billing

Not active until Paid Launch Date. Once approved and implemented, the monthly subscription begins when the Event Organiser expressly accepts and activates a paid plan, not when an invite is sent or when the first guest joins. The entry-level monthly subscription is due even with zero joined users or no platform activity. The subscription renews automatically on the corresponding monthly anniversary of activation until cancelled, subject to applicable law and clearly disclosed checkout terms. Higher tiers depend on the counted joined-user seats defined in section 7. No mid-cycle tier-upgrade charge or proration applies. [[DECISION: monthly anniversary handling for dates absent from a month.]] No money may be collected or renewal enabled before tier rules, checkout disclosure, legal review and licensed `[[PSP]]` support are verified.

3. Cancelling — online, any time

3.1 Once monthly subscriptions launch, cancellation must be available online in Settings → Subscription and via [[EMAIL]], with a clear effective date and no undisclosed renewal.

3.2 [[COUNSEL: confirm effective cancellation timeline, statutory rights, and treatment of unused amounts once the billing model is chosen.]] Confirmation and future-charge prevention must be implemented and tested before launch.

3.3 [[COUNSEL: confirm alignment with Consumer Protection Law s.13D (cancelling ongoing transactions) and any refund of unused period]]

4. Referral credit

4.1 Referral credit (Fee Schedule A6) is added to your account when a linked Paid Stay is completed. It is reversed if that stay is refunded.

4.2 Credit (if the referral programme and subscription-credit model are approved):

• reduces eligible future Hostly charges, subject to the final billing model;
• has no cash value;
• cannot be transferred;
• expires [[DECISION: 12 months]] after it is earned.

5. Price changes

We give at least 30 days' notice of a price change. You can cancel before it takes effect.

6. Your duties

The Event Organiser terms (Terms s.17) apply, including:

• participant-data rules;
• no steering.

7. Usage

Monthly tiers depend on distinct user IDs who join at least one event managed by the Event Organiser within the monthly billing period. Count each user once per organiser per billing period, even across multiple events. An invitation alone, without joining, does not count. A seat activates immediately when a user first joins in a billing month and remains counted through the end of that billing month, even if the user leaves the event the same day. Rejoining or joining another event under the same organiser does not create another seat in that month. There is no proration or seat reversal for leaving. At each monthly renewal, a user who remains joined to any of the organiser's events activates a seat for the new billing period. A user who has left or been removed from all the organiser's events before renewal does not carry over. Rejoining later in that month activates one seat for that month. The dashboard must display counted users, the current tier and the tier limit. Participants added by other users without the organiser's approval must not count against the organiser's plan. [[DECISION: billing-period reset, threshold notifications, upgrades, downgrades and over-limit handling.]] (Engineering DB-11)

---

A8. Community, Review & Safety Standards — NEW

Document ID: HOSTLY-COMMUNITY-1.0 | Version: 1.0 (proposed) (v1.1 — OPS-02, CONS-05, SAFE-03, SAFE-04)

1. Our standards

Hostly is a community built on trust. Everyone using Hostly agrees to:

- follow House Rules and safety instructions; - know where the shelter is; - no prohibited cameras (Terms s.15.5); - no weapons left accessible to Guests; - no illegal drugs.

• Be honest: accurate profiles, listings and messages; no fake accounts; no impersonation.
• Be respectful: no harassment, threats, hate speech or unlawful discrimination (Terms s.15.7).
• Be safe:
• Protect privacy: don't share other people's details, addresses or access codes. Don't use Hostly data for marketing or profiling.
• Keep it on Hostly: don't use Hostly messages to spam, advertise or send links that imitate Hostly. Where Paid Stays are available, don't take payment off-platform.
• No unauthorised parties or events in a Host's home.

2. Reviews

2.1 Who can review. Only a Guest and a Host who had a confirmed stay together can review each other. Reviews open after check-out and close [[14]] days later.

2.2 What a review must be:

• honest;
• based on your own experience;
• relevant to the stay.

2.3 Not allowed:

• fake, paid-for, swapped or coordinated reviews;
• reviews in return for a discount or a threat;
• personal data such as addresses or phone numbers;
• discriminatory, threatening or defamatory content.

2.4 What we remove. We remove reviews only for breaching s.2.3, or where the law requires it. We never remove a review because it is negative.

• If a Host offers anything in exchange for a review, that must be disclosed.
• We monitor for review manipulation.

2.5 Authors can edit their review text within the review window. They cannot change its moderation or publication status.

3. Reporting

3.1 Use an available Report action or the Contact form, or email hello@hostlystay.app. A successful on-screen receipt confirms storage only.

3.2 In an emergency, call emergency services first: 100 / 101 / 102 in Israel.

3.3 This inbox is not monitored 24/7. There is no guaranteed operational review time. In immediate danger, contact local emergency services first; in Israel: Police 100, MDA 101, Fire 102.

• Sending a report does not automatically suspend a member, refund a payment or cancel a stay.
• Applicable statutory deadlines remain unaffected.

The English/Hebrew UI receipt confirms successful storage only. This remains proposed wording for legal review; no approved legal registry version or public policy changes here.

4. Enforcement

Depending on how serious and how repeated a breach is, we may:

• warn;
• remove content;
• restrict features;
• suspend an account;
• remove an account.

Terms s.18 explains how we notify you and how you can ask for review.

5. Law enforcement

We disclose user information to authorities only where the law requires it or where there is an imminent risk to life. We record every request.

---

A9. Host Compliance Declaration — NEW

Document ID: HOSTLY-HOSTDEC-1.0 | Version: 1.0 (proposed) | Shown at listing creation; each item ticked and recorded with the version, date and time. (v1.1 — PROP-02)

Before my listing goes live, I confirm that:

1. Authority. I own the accommodation or have the right to host in it. Where needed, my landlord, mortgage lender and building or condominium committee (bayit meshutaf) allow it. 2. Local rules. I have checked, and will comply with: - municipal, planning and building rules that apply to hosting; - any licence or registration my area requires. I will enter any licence or registration number when Hostly asks for it. 3. Safety. - The accommodation has working smoke detection [[VERIFY: CO detection where gas appliances]]. - It has safe gas and electrical installations. - It has a clear exit route. - I have stated whether there is a mamad or the nearest shelter. 4. Cameras. There are no recording devices in bedrooms, bathrooms or sleeping areas. I have disclosed any other camera in the listing. 5. Insurance. I understand Hostly does not insure me. I have checked whether my home insurance covers guests, especially paying guests. 6. Tax. I understand that paid hosting income may be taxable and that I am responsible for my own tax and VAT. 7. Capacity and accuracy. My listing's capacity, sleeping arrangements, accessibility claims and House Rules are accurate. I will keep them updated. 8. Non-discrimination. I will not refuse or treat Guests differently on any ground protected by law (Terms s.15.7). 9. Guest data. I will use Guest information only for the stay.

I understand Hostly may ask for evidence and may pause my listing if any statement is untrue.

---

A10. Notice to Invited Event Participants — NEW

Document ID: HOSTLY-INVITEE-1.0 | Version: 1.0 (proposed) | Sent automatically with the first invitation to any person whose details an Event Organiser adds. (v1.1 — PRIV-02)

> [Event Organiser name] has invited you to find accommodation for [event] through Hostly. > > - What we received: [Event Organiser name] gave Hostly your name and [email/phone] so we could send you this invitation. They may also have added the names of people travelling with you, and for children only a first name and age band. > - Why: only to help you find a place to stay for this event. > - Who sees it: the Event Organiser sees whether you have found accommodation. Hosts see your details only if you request a stay with them. Nobody sees your email or phone unless you choose to share it. > - How long: if you don't join Hostly, we archive and anonymise your details [[90]] days after the event. > - Your choice: > - Ignore this message, or tap "Remove my details" and we will delete them. > - We will not send you marketing unless you sign up and agree. > - More: Hostly Privacy Policy [link] · [[EMAIL]] · [[ENTITY]], [[ADDRESS]]

---

A11. Accessibility statement - engineering reconciliation

Document ID: HOSTLY-A11Y-1.0 | Status: Draft for legal review | Reviewed: 13 October 2026

The current public statement is maintained in `src/routes/accessibility.tsx` and published at https://hostlystay.app/accessibility in English and Hebrew. That route is the single publication source; this file records its engineering status and counsel-held work, rather than maintaining competing public wording.

Current public position

Hostly is working to make its website and services more accessible. Accessibility testing and improvements are ongoing. Hostly does not currently claim full compliance with an accessibility standard.

Current limitations include incomplete colour-contrast, keyboard, screen-reader, text enlargement/reflow, forms and Hebrew-layout testing across all journeys. Some screens and interactions may not yet be fully accessible.

Accessibility feedback goes to hello@hostlystay.app. Reports should identify the affected page/action and assistive technology where relevant. No unverified coordinator appointment or response-time commitment is published.

Verified engineering foundation

PR #184 merged on 13 October 2026 (`9927c2d`); TypeScript/tests/build passed in Hostly checks run 38327128196. The public page, footer link and feedback address were verified live. PR #185 corrected skip-link focus to the actual main landmark. Keyboard activation focusing MAIN was rechecked live on 13 October.

Visible focus styles, reduced-motion CSS and document language/direction handling exist. These foundations are not evidence that every control or journey meets the target.

Remaining review gates

• Engineering target: WCAG 2.2 AA, as described in `docs/ACCESSIBILITY_REQUIREMENTS.md`. Complete route/state contrast, keyboard, forms, error/loading, reflow, language and assistive-technology tests.
• Run and record actual NVDA, TalkBack and relevant VoiceOver tests in English and Hebrew. An accessibility tree or automated check does not substitute for a screen reader.
• Qualified Israeli counsel must confirm applicable regulations and SI 5568 version, any exemption, required coordinator details and final statement wording. This draft makes no legal compliance or exemption claim.
• Accommodation accessibility descriptions require separate host verification and traveller communication; platform accessibility does not certify a home.
• Keep remaining findings, fixes and release evidence in `HOSTLY_BUILD_CONTROL.md`.

A12. Regional Legal Supplements

Document ID: HOSTLY-REG-1.1 | Version: 1.1 (proposed) | Replaces: HOSTLY-REG-1.0

Status of each Part (v1.1 — D2):

• Part A (Israel) is active at launch.
• Part B (UK) and Part C (South Africa) are inactive. The Platform is not offered in those countries until Hostly announces a launch there, and until then those Parts have no effect.
• The v1.0 UK and South Africa analysis is kept below as preparation, updated for law changes found on 06-10-2026.

Part A — Israel (active)

A1. Contracting entity and law. You contract with [[ENTITY]]. Israeli law and Terms s.23 apply.

A2. Consumer protection.

- s.14C: distance transactions (Cancellation Policy s.3); - s.13D: cancelling ongoing transactions (Creator Subscription Terms s.3); - the price-display rules: NIS including VAT.

• The Consumer Protection Law, 5741-1981 applies, including:
• Terms are reviewed against the Standard Contracts Law, 5743-1982. [[COUNSEL: whether individual hosts are "dealers"]]

A3. Privacy. The Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force 14 August 2025), applies, together with the Data Security Regulations 2017 and the Transfer Abroad Regulations 2001. Hostly records:

It reviews both when it reaches 100,000 data subjects or adds new categories of sensitive data. [[COUNSEL: confirm]]

• a dated DPO applicability assessment;
• a database-notification assessment.

A4. Accommodation.

- municipal rules, including local taxes such as arnona classification; - planning rules; - condominium bylaws; - lease and mortgage terms.

• There is no single national licence for short-term hosting in Israel.
• Hosts must check:
• Hostly's ability to list a home is not a statement that hosting there is lawful.

A5. Payments. From the Paid Launch Date, payments run only through `[[PSP]]`. [[COUNSEL: confirm the licence position of `[[PSP]]` and that Hostly itself needs no licence under the Payment Services and Payment Initiation Law, 5784-2023]]

A6. Referral credit. [[COUNSEL: confirm the referral credit is not brokerage under the Real Estate Brokers Law, 5756-1996]]

A7. Anti-spam. Marketing messages follow s.30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982.

A8. Accessibility. See the Accessibility Statement (A11).

A9. Security situations. The Major Disruption rules (Cancellation Policy s.7) apply to Home Front Command restrictions and security escalations.

Part B — United Kingdom (inactive until UK launch)

B1. Privacy.

- recognised legitimate interests; - updated automated-decision rules; - a right to complain to the controller first.

• UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. Key changes in force from 5 February 2026:
• PECR. Maximum PECR fines are now aligned with UK GDPR levels: up to £17.5m or 4% of turnover.
• Cookies: the DUAA allows some analytics/statistical cookies without consent if clear information and an opt-out are given. Hostly keeps consent-first analytics globally unless decided otherwise. (v1.1 — DIG-02, PRIV-05)

B2. Consumer law.

- drip pricing (the total mandatory price must be shown upfront); - fake reviews (Hostly must take reasonable and proportionate steps to prevent them). The CMA can fine directly. (v1.1 — CONS-05)

• Consumer Rights Act 2015.
• Digital Markets, Competition and Consumers Act 2024. Its unfair-commercial-practices regime has been in force since April 2025. It bans:
• Consumer Contracts Regulations 2013. The cancellation exemption for accommodation on specific dates (reg. 28) applies.

B3. England. The national short-term-let registration scheme is expected to launch in March 2027. Host onboarding must support a registration-number field that becomes mandatory by area and date.

B4. Scotland. Mandatory short-term-let licensing applies. Capture the licence number before a listing is active, and follow the guidance for booking platforms.

B5. Wales. Visitor-accommodation registration opened on 1 October 2026. [[VERIFY on gov.wales: deadline for existing providers — v1.0 stated 31 March 2027]] Capture the registration number.

B6. Northern Ireland. Separate regime. Get Northern Ireland-specific advice before launching there.

B7. Payments. Use a regulated marketplace PSP. Get FCA perimeter advice (PERG 15 and the commercial agent exclusion) before Hostly touches any funds.

B8. Platform reporting. The Platform Operators (Due Diligence and Reporting Requirements) Regulations 2023 apply to HMRC seller reporting for property rentals. These records are kept even after an account is deleted.

B9. Governing law. English law, with Scottish and Northern Ireland consumers keeping their local courts and mandatory rights. [[COUNSEL]]

Part C — South Africa (inactive until South African launch)

C1. Privacy. POPIA, which requires:

• an Information Officer, registered with the Information Regulator;
• a PAIA manual;
• notification of security compromises to the Regulator and to data subjects;
• compliance with the cross-border transfer conditions (s.72).

C2. Consumer.

- s.43 information disclosures; - s.44 cooling-off. Accommodation for specific dates is exempt under s.42. [[COUNSEL: confirm]]

• Consumer Protection Act 68 of 2008.
• ECTA 25 of 2002:

C3. Accommodation.

• Municipal zoning, body-corporate and HOA rules apply.
• Monitor the Department of Tourism's 2026 Draft Code of Good Practice for Short-Term Rentals. It is not yet binding.

C4. Payments. The National Payment System Act and SARB/Prudential Authority activity-based authorisation, which is being modernised in 2026. Re-check immediately before a South African paid launch.

C5. Governing law. South African law for South African consumers. [[COUNSEL]]

---