Your information, handled with care.

You give us: your name, email, phone, party size, travel dates, and any notes when you inquire or book; account credentials and property details if you’re a homeowner using the portal.

Collected automatically: standard server and analytics data — IP address, browser type, pages viewed — used to keep the site secure and understand what’s useful. We do not sell this.

Payments: card details are entered directly with our payment and booking processors (Stripe, via Guesty). We never see or store full card numbers on our own systems.

To respond to inquiries, confirm and service your stay, send booking and account communications, operate the homeowner portal, keep the site secure, comply with tax and legal obligations, and improve our service. That’s the whole list.

Only the service providers needed to run a stay or the business — our booking/property platform (Guesty), payment processor (Stripe), email and messaging providers (Resend, Gmail), error monitoring (Sentry), and our hosting provider. Each receives only what it needs. We do not sell your personal information or share it for third-party advertising. We may disclose information if required by law.

Messages you send to the on-site concierge are processed by our AI provider (Anthropic) to generate a reply. The public concierge has access only to our published home listings and live open/closed availability — never guest identities, reservation details, or financial records. Don’t enter payment details or sensitive personal information into the chat; for anything private, call or email the team.

We use essential cookies to keep you signed in and the site working, and analytics (PostHog) to understand how the public site is used — pages visited, clicks, and anonymized session recordings that show how visitors navigate. Recordings mask everything you type, and neither analytics nor recordings run in the owner portal. You can block non-essential cookies in your browser; the site still works.

You can ask us to access, correct, or delete the personal information we hold about you, and you can unsubscribe from marketing email at any time via the link in any message or by emailing us. We’ll honor verified requests as required by applicable law. Account and booking records we’re legally required to keep (e.g., for tax) are retained for the required period, then deleted.

We protect data with encryption in transit, access controls, row-level database isolation so one homeowner can never see another’s records, and two-factor authentication for staff. No system is perfectly secure, but we treat your information the way we’d want ours treated.

The site and our services are intended for adults. We don’t knowingly collect personal information from anyone under 18.

We update this policy from time to time. Material changes will be posted here with a new effective date; significant changes affecting account holders are also sent by email.