Privacy

What we collect

• Your account: the name you give us, your email address, and your phone number once you verify it. If you sign in with a password we store a one-way hash of it, never the password itself. If you sign in with Google, Facebook or Apple we store that provider’s user id for you and the email address it confirmed.
• If you host: your listings, their addresses, photos, house rules, and the answers you give in the assistant interview, including things like check-in steps.
• If you book: your stay dates, the number of guests, what you paid, and the messages in that booking.
• Messages between guests and hosts, and the assistant’s replies.
• Verification results: whether an identity or property check passed, and why. Documents you upload to prove you control a property.
• Technical records: sign-in times, the emails and texts we sent you, and an audit log of actions taken in your account.

What we never hold

• Card numbers. Payment details are entered directly into Stripe’s payment form and never reach our servers.
• Identity documents or selfies. Identity checks run inside Stripe Identity; we receive only the outcome and a reference number.
• Lock codes, Wi-Fi passwords and other secrets a host stores for a property are encrypted before they are saved, and they are never sent to the assistant’s model. When a guest is entitled to one, the software substitutes the value after the reply is written.

Who else sees your information

We use these companies to run the service. Each sees only what its job needs.

• Amazon Web Services hosts the site and the database, in the United States.
• Stripe takes payments, pays hosts, and runs identity and bank checks.
• Anthropic provides the model behind the assistant. The conversation and the property’s published details are sent there to write a reply. Secrets are not.
• Amazon SES delivers our emails and Twilio our text messages, including the codes that confirm a mobile number.
• Google, Facebook and Apple confirm who you are when you choose one of them to sign in. They tell us your user id, your name and your email address. We do not post anything to them.
• Expo delivers push notifications to the host app.
• PriceLabs reads your calendar and writes your prices, but only if you connect it yourself.

We do not sell your information, and we do not run advertising trackers on the site.

What guests and hosts see about each other

A host sees the name, email address and phone number of a guest who books with them, because they need to reach that guest about the stay. A guest sees the host’s name and the property details. Before a booking, an enquiry shows the host your first name and your message. Reviews are shown publicly under your first name once both sides have written one, or after fourteen days.

Text messages

If you give us a mobile number, we text one code to confirm it. That code only proves the number is yours; it does not sign you up for other texts. If you separately tick the optional box agreeing to customer-care texts, we also text you about your bookings and stays: answers to your questions, replies to booking-related requests such as a late check-out, and conversation follow-ups. We do not send marketing or promotional texts.

Message frequency varies based on your bookings and conversations. Message and data rates may apply. Reply STOP to opt out at any time and HELP for help. The terms of the program are in the terms of service.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We keep the date you agreed to texts with your account, and we do not pass your agreement or your number to hosts. Twilio delivers the messages on our behalf and uses the number for nothing else.

Cookies

Two cookies, both necessary. One keeps you signed in. One remembers whether you were last using the hosting side or the traveling side of the site. There are no advertising or analytics cookies.

How long we keep things

• Documents you upload to prove property ownership are deleted ninety days after the decision they supported.
• Bookings, payments and payouts are kept for as long as tax and accounting rules require, because they are financial records.
• The audit log of actions in your account is kept and cannot be edited, including by us.
• Everything else lives as long as your account does.

Requests from public authorities

If a court, a police force or a regulator asks us for your information, we disclose it only on a written request that cites a legal basis, after reviewing that basis; we refuse or narrow requests that are unlawful or ask for more than the law allows; we disclose the minimum the valid request covers; and we keep a record of every request and our answer. Where the law lets us, we tell you about the request before we answer it.

Deleting your account

You can have your account deleted once you have no upcoming stays and no live listings. Your name is replaced, your email address and phone number are removed, and any organisation you own is closed. Bookings that already happened stay in the financial record without your contact details attached. The steps are on the delete your data page.

Your choices

• Ask us for a copy of what we hold about you, or for a correction: contact us from the address on your account.
• Turn off push notifications in your phone’s settings, and unsubscribe from anything that is not about a booking you are part of.
• Sign in with an email and password instead of Google, Facebook or Apple if you would rather they were not involved.

Children

The service is for adults. Do not create an account if you are under 18.

Changes and contact

If this page changes we will update the date at the top, and tell you by email when the change matters. Questions about privacy: contact us.