Privacy Policy

1. Who We Are

The data controller for the purposes of this Privacy Policy is:

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us using the details above.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

• the Platform website and applications;
• account creation and account management;
• Listings and booking activity;
• payments, refunds, payouts, and deposits;
• messages and communications through the Platform;
• reviews and feedback;
• support, moderation, verification, fraud prevention, and dispute handling.

This Privacy Policy does not directly apply to third-party services that operate under their own privacy notices, including payment providers such as Stripe.

3. Categories of Personal Data We Collect

Depending on how you use the Platform, we may collect the following categories of personal data.

3.1 Account and Registration Data

We may collect:

• first name and last name;
• preferred name;
• email address;
• phone number;
• account role and account status;
• profile image;
• hashed password and login-related security data;
• email verification and phone verification status;
• account creation and update timestamps.

3.2 Identity and Verification Data

We may collect:

• date of birth;
• name as shown on official documents;
• government ID information;
• uploaded government ID files;
• address;
• tax-related information, including tax ID, tax country, and tax status;
• verification and onboarding data required for compliance, payment, or payout purposes.

3.3 Profile Data

Users may choose to provide profile-related information such as:

• job;
• languages;
• nationality;
• gender;
• preferred language;
• timezone;
• bio;
• social media links;
• additional personal profile details.

Some of this information is optional.

3.4 Listing and Property Data

For Hosts and Listings, we may collect:

• Listing title and description;
• Listing photos and uploaded media;
• property type, place type, room and guest capacity;
• amenities and sleeping arrangements;
• location and address-related information;
• availability and calendar data;
• pricing, discounts, fees, and booking settings;
• cancellation terms and house rules;
• Listing draft information;
• Listing moderation data.

3.5 Booking and Reservation Data

We may collect:

• booking dates;
• reservation status and payout status;
• request messages;
• guest count, children count, and pets count;
• total price and price breakdown;
• actual check-in and check-out information;
• cancellation, refund, and dispute-related information;
• deposit and damage-related booking information.

3.6 Payment and Payout Data

We may collect:

• payment status and payment references;
• amount and currency;
• limited payment method metadata such as card brand and last four digits;
• Stripe-related identifiers such as customer, payment intent, checkout session, transfer, payout, and refund IDs;
• payout-related information for Hosts;
• transaction history and payment-related records;
• deposit hold, release, or capture information.

We do not intend to store full payment card numbers on our own systems where payment processing is handled by Stripe or another integrated payment provider.

3.7 Messages, Notifications, and Communications

We may collect:

• message content exchanged through the Platform;
• conversation metadata;
• delivery, read, deletion, and edit status;
• support chat content;
• notification content and delivery data;
• push subscription data.

3.8 Reviews and Feedback

We may collect:

• ratings;
• review comments;
• timestamps;
• reservation-linked review information.

3.9 Damage Reports, Disputes, and Claims

We may collect:

• damage report descriptions;
• evidence files such as photos, videos, invoices, receipts, or estimates;
• requested and approved claim amounts;
• dispute-related communications;
• support notes and case outcomes.

3.10 Technical, Device, and Security Data

We may collect:

• IP address;
• login IP and signup IP;
• browser and device information, including user agent;
• timestamps relating to activity or login;
• approximate geolocation inferred from IP or provided by the user where applicable;
• antifraud, account security, and risk-related metadata.

3.11 Moderation and Safety Data

We may collect or generate:

• Listing moderation scores;
• moderation flags and moderation events;
• rejection reasons;
• image-analysis metadata;
• OCR-derived text from uploaded images;
• safety and policy-enforcement related indicators.

4. How We Collect Personal Data

We may collect personal data:

• directly from you when you register, create a Listing, make a booking, upload files, send messages, submit reviews, or contact support;
• automatically when you use the Platform, including through device, security, and activity logs;
• from payment providers such as Stripe;
• from authentication or login providers;
• from other users where a booking, review, dispute, or support process involves you;
• from moderation, verification, or compliance checks performed manually or with automated assistance.

5. How We Use Personal Data

We use personal data for the following purposes.

5.1 To Create and Manage Accounts

We use personal data to register users, authenticate access, secure accounts, and maintain account settings.

5.2 To Publish and Manage Listings

We use data to allow Hosts to create, edit, publish, and manage Listings.

5.3 To Enable Bookings and Stays

We use data to allow Guests and Hosts to request, confirm, manage, cancel, and complete bookings.

5.4 To Process Payments, Refunds, Payouts, and Deposits

We use data to process booking payments, refunds, payouts, deposit-related operations, and payment-related disputes.

5.5 To Verify Users and Prevent Fraud

We use data to verify Hosts and, where applicable, Guests; to reduce fraud; to secure accounts; and to protect the Platform and its users.

5.6 To Provide Messaging, Notifications, and Support

We use data to support communication between users, provide customer support, send notifications, and respond to issues.

5.7 To Handle Disputes, Damage Reports, and Enforcement

We use data to review damage claims, investigate disputes, assess refunds, and enforce Platform rules.

5.8 To Moderate Content and Improve Safety

We use data to review Listings, uploaded content, reviews, and platform activity for quality, policy compliance, and trust and safety purposes.

5.9 To Improve the Platform

We use data to improve the user experience, platform functionality, ranking systems, safety features, and operational performance.

5.10 To Comply With Legal Obligations

We use data where necessary to comply with applicable legal, tax, accounting, regulatory, or law-enforcement obligations.

6. Legal Bases for Processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases.

6.1 Performance of a Contract

We process personal data where necessary to:

• create and manage accounts;
• publish Listings;
• enable bookings;
• process payments and payouts;
• provide messages, notifications, and support connected to Platform use;
• administer cancellations, refunds, and booking-related workflows.

6.2 Legal Obligation

We process personal data where necessary to comply with legal obligations, including:

• accounting and financial recordkeeping;
• tax obligations;
• regulatory requests;
• certain compliance and identity-verification obligations;
• lawful disclosures to authorities.

6.3 Legitimate Interests

We may process personal data where necessary for our legitimate interests, including:

• fraud prevention;
• account and payment security;
• moderation and safety;
• dispute handling;
• support operations;
• service integrity;
• internal analytics and service improvement;
• enforcement of our Terms and Platform rules.

Where required, we will balance these interests against your rights and freedoms.

6.4 Consent

Where required by law, we rely on consent for certain optional processing activities, such as certain marketing communications or non-essential tracking technologies.

You may withdraw consent where applicable at any time. This will not affect the lawfulness of processing carried out before withdrawal.

7. How We Share Personal Data

7.1 Between Hosts and Guests

We may share limited personal data between Hosts and Guests where necessary for a booking, stay, communication, dispute, or support process.

For example:

• Hosts may see certain Guest identity and booking details relevant to the stay.
• Guests may see certain Host and Listing information relevant to the booking and stay.

7.2 With Stripe and Other Payment Providers

We may share personal data with Stripe and other integrated payment providers to:

• process payments;
• process refunds;
• support payouts;
• manage deposits or holds;
• complete onboarding and verification steps;
• comply with payment-related legal and compliance requirements.

7.3 With Verification, Compliance, and Fraud-Prevention Providers

We may share data with providers that help us perform:

• identity checks;
• age checks;
• onboarding checks;
• compliance screening;
• fraud prevention;
• safety or risk reviews.

7.4 With Hosting, Infrastructure, Messaging, and Storage Providers

We may share data with vendors that provide:

• cloud hosting;
• file storage;
• messaging infrastructure;
• email delivery;
• push notification services;
• analytics and technical operations.

7.5 With Support, Moderation, and Authorized Personnel

Authorized staff, contractors, and service providers may access personal data on a need-to-know basis for support, fraud prevention, moderation, legal compliance, and dispute handling.

7.6 With Advisors and Authorities

We may share personal data with:

• legal, tax, accounting, and professional advisors;
• courts, regulators, tax authorities, law enforcement, or other competent authorities,

where required by law or where necessary to establish, exercise, or defend legal claims.

8. Payments and Stripe

Payments on the Platform may be handled through Stripe.

When you use payment-related features, personal data may be processed in connection with:

• payment initiation;
• customer setup;
• payment method storage;
• payment verification;
• refunds;
• payouts;
• deposit holds or damage-related recovery;
• legal and compliance checks.

We may store limited payment-related metadata and Stripe identifiers, but payment card processing is generally handled by Stripe.

9. Verification, Fraud Prevention, and Safety

We may use personal data to verify users and protect the Platform.

This may include:

• identity verification;
• age verification;
• payment-related checks;
• legal-right-to-list verification for Hosts;
• fraud and abuse detection;
• suspicious activity reviews;
• account restriction or enforcement decisions.

Verification may involve manual review, automated checks, or both.

Failure to complete required verification may result in restricted access to Listings, bookings, payments, or payouts.

10. Messages, Reviews, and User Content

10.1 Messages

Messages sent through the Platform may be processed to:

• provide communication between users;
• support booking workflows;
• respond to support requests;
• investigate disputes;
• enforce rules;
• protect safety and prevent abuse.

10.2 Reviews

Reviews and ratings may be displayed to other users as part of the Platform’s trust and transparency features.

10.3 Listing Content

Hosts are responsible for the original content they submit in Listings. We may display, format, translate, moderate, and adapt that content for Platform purposes.

11. AI-Assisted Content and Automated Review

The Platform and/or Hosts may use AI-assisted tools for:

• Listing descriptions;
• summaries;
• translations;
• recommendations;
• moderation support.

We may also use automated tools to identify potentially unsafe, misleading, prohibited, or low-quality content. These processes may be combined with human review.

Hosts remain responsible for the original accuracy and lawfulness of their Listing content.

12. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including for:

• account administration;
• bookings and stays;
• payments and payouts;
• support and communication;
• fraud prevention and safety;
• compliance and legal obligations;
• dispute resolution and legal claims.

Retention periods may vary depending on the type of data and the purpose of processing. For example:

• account data may be retained while the account remains active and for a reasonable period thereafter;
• booking and payment records may be retained for accounting, tax, audit, and dispute purposes;
• verification data may be retained for compliance, fraud prevention, and legal obligations;
• messages and support data may be retained for communication history, safety, and dispute handling;
• damage reports and claim data may be retained for enforcement and legal-defense purposes.

13. International Data Transfers

Some of our service providers may process personal data outside the EEA, including in countries that may not provide the same level of data protection as your country.

Where required by applicable law, we use appropriate safeguards for such transfers, which may include:

• adequacy decisions;
• standard contractual clauses;
• or other lawful transfer mechanisms.

14. Cookies and Similar Technologies

We may use cookies and similar technologies for:

• essential site functionality;
• security;
• session management;
• performance and analytics;
• user preferences.

Where required by law, we will request consent before using non-essential cookies or similar technologies.

Where applicable, additional details may be provided in a separate Cookie Policy or through a cookie consent tool.

15. Data Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure.

However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

16. Your Rights

Where applicable under data protection law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• object to certain processing;
• request portability of your data;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent supervisory authority.

To exercise your rights, contact us at [PRIVACY EMAIL].

We may need to verify your identity before processing certain requests.

17. Children

The Platform is intended for users aged 18 and older.

We do not intend to offer the Platform directly to children. If data relating to minors is processed in connection with a booking, such processing is limited to what is necessary for the booking and is typically provided by the responsible adult user.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users by:

• posting the updated Privacy Policy on the Platform;
• updating the “Last Updated” date;
• sending an email or in-platform notice where appropriate.

19. Contact Us

If you have questions, concerns, or privacy requests, please contact: