Privacy Policy

Your account. Your name and email address, and a password if you set one (we store only a scrambled hash of it, never the password itself). If you add them, your phone number, profile photo and the details on your profile, such as where you live, your work and the languages you speak.

Signing in with another account. If you continue with Google, Apple, Facebook, Microsoft or Amazon, that provider sends us your name, your email address and the ID it uses for your account with HomeShared. We keep the ID so you can sign in the same way next time. We never see your password for that account, and we don't post on your behalf or read your friends, contacts or other data held there. Apple may give us a private relay address instead of your real email.

Bookings and stays. The homes you book, your dates, guest count and price, and your trips, receipts, reviews and saved homes. If a home asks you to register your stay: the names of the people staying, the vehicles and pets you're bringing, your arrival time and notes, and the guest agreement you e-sign, recorded with your signature, the time, your IP address and your browser so the signature can be checked later.

Messages. What you write to hosts or guests on HomeShared, and what you send to us.

Payments. Card payments are made through Stripe, and your card details go to Stripe, not to us. We keep a record of what was charged, refunded or paid out, and when. Hosts who take payments or pay their HomeShared plan also have a Stripe account or customer record linked to their HomeShared account.

Identity checks. Guests and hosts verify their identity with Stripe Identity: a photo of a government ID and a selfie, taken and kept by Stripe. HomeShared receives the result, the name on the ID and when it was checked, not the documents or photos.

Listings and photos. What hosts add about their homes: the address, description, photos, house rules, prices, calendars and booking-site pages. When a host imports a listing from Airbnb, we copy that listing's public details, photos and reviews. When a host connects other tools (a property-management system, a pricing tool or another site's calendar), we receive the calendars, prices and reservations those tools share.

Other things you send us. Reports about a listing; if you report a neighborhood concern, what you tell us and the name, email and phone number you give; and your email if you join the waitlist for a home that isn't listed yet.

Technical data. Cookies that keep you signed in and remember choices like traveling or hosting mode. Like any website, our hosting provider logs requests, including IP addresses and browser details, which we use to keep the site secure and fix problems. We also log each time a listing page is opened (the time, your browser, the page you came from and your approximate location, but not your IP address) to see which homes guests are looking for, and, while you have a page of ours open, which page it is, where your visit came from and your approximate location, to see how many people are on the site and where; that record is kept for 30 days. We don't use advertising or cross-site tracking cookies.

AI assistants. If an AI assistant looks up homes on HomeShared for you, see AI assistants and our agent API below.

• to run your account, sign you in and keep it secure;
• to make and manage bookings, take payments and refunds, pay hosts, and keep calendars in step;
• to send email about your account, bookings, messages and reminders;
• to check identities, prevent fraud and abuse, and review reports;
• to answer you when you contact us;
• to keep the records that tax, accounting and other laws require;
• to understand how HomeShared is used and make it better.

AI features. Hosts can ask for AI-drafted replies in their inbox and use an AI assistant to edit their booking site. When they do, the conversation or page content involved is sent to our AI provider (OpenAI or Anthropic) to write the draft, which the host reviews. After a stay, an AI provider may also read that stay's messages to check for an unresolved problem before we ask the guest for a review.

We don't sell your personal information, and we don't use it for advertising.

Hosts and guests. When you message or book a home, its host sees your name, profile, messages and booking details, whether you've verified your identity and the name on your ID, and your registration if the home asks for one. Guests see a host's profile and listing, and get the exact address once a booking is confirmed.

Everyone. Listings, host profiles and reviews are public, so anyone can see them, including on search engines.

Homeowners' associations. Some homes are in communities that require short-term guests to be registered. For those homes, your registration is sent to the community office, with the host copied.

Tools a host connects. If a host links a property-management or pricing tool, or syncs their calendar with another booking site, the details of your reservation that tool needs (such as dates, price and guest name) are shared with it.

Companies that help us run HomeShared. They handle data on our behalf and only for that purpose:

• Stripe: payments, payouts, subscriptions and identity checks;
• Resend: sending our email;
• Vercel: hosting the site and storing photos, signatures and documents;
• our database provider: storing account and booking data;
• Google Maps: maps and looking up addresses;
• OpenAI and Anthropic: the AI features above.

Sign-in providers. When you continue with Google, Apple, Facebook, Microsoft or Amazon, that provider knows you signed in to HomeShared. What it does with that is covered by its own privacy policy.

Insurance. If you choose to buy travel or damage coverage from our insurance partner, you deal with them directly, under their terms and privacy policy.

When the law requires it. We may share information to comply with the law or a valid legal request, to protect the safety or rights of our users, the public or HomeShared, or as part of a merger or sale of the business, in which case this policy would keep applying to it.

We keep your information while your account is open. When you delete your account, we delete your personal information or remove what links it to you right away (within 30 days if you ask us by email). We keep only what we must: booking, payment and tax records for as long as the law requires, and what we need to resolve a dispute or prevent fraud. Backups are overwritten on their own schedule.

Some things you shared with others stay with them: a host keeps the record of your stay, and messages you sent stay in the other person's inbox, shown as from "Deleted user". Stripe keeps its own payment and identity records under Stripe's privacy policy.

AI assistants such as Claude and ChatGPT, and other apps, can look up homes on HomeShared through our agent API and MCP server. Nobody needs an account for this, and the assistant doesn't send us your conversation, only what each lookup needs.

What we receive. The Airbnb listing link you asked about or the place you want to stay, your dates, how many adults, children, infants and pets are coming, and, if the assistant passes it, the total Airbnb showed you. Like any website, we also get the technical details of each request, such as its IP address and the name of the app or browser that sent it. When you use an AI assistant, those are usually its provider's servers, not your own device.

What we keep. For each Airbnb link looked up, a record of when, which listing it was and whether it's on HomeShared, the name of the app or browser that asked, the page that linked to it if there was one, the approximate location of the request (country, region and city), and a scrambled code made from the IP address and app name with a secret key, so repeat lookups can be counted without keeping the IP address. We don't keep the dates or party size of a lookup. To enforce our rate limits we also count requests under a scrambled code made from the IP address. Quotes aren't stored: the quote the assistant gets back carries its own price and expires after 15 minutes.

No personal data. The agent API never asks for your name, email or payment details, and it refuses any request that contains a card number. If you go on to book, you sign in and pay on HomeShared's own checkout page, and the rest of this policy covers what we collect there.

Airbnb. To compare a home that isn't on HomeShared yet, our servers read the public Airbnb listing page for that link. Nothing about you is sent to Airbnb.

How long we keep it. Rate-limit counts are deleted within three days. Lookup records have no set expiry: we use them to see which homes travelers want, and they don't identify you. Our hosting provider's request logs are covered under Technical data above.

Questions about this: email support@homeshared.app.

• See and change your profile and contact details in Account → Personal info.
• Change your email or password, and connect or disconnect Google, Apple, Facebook, Microsoft or Amazon, in Account → Login & security.
• Delete your account yourself in Account → Login & security → Delete account, on the site or in the app, or email support@homeshared.app if you can't sign in. See how to delete your account for what has to be finished first.
• If we set up your home from its public Airbnb listing, choose "remove it" beside "Own this home?" on its page. Once you show it's yours with its Airbnb calendar link, it comes off HomeShared with your account, and we don't bring it over again.
• Ask for a copy of your information, or ask us to correct it or stop using it, by emailing support@homeshared.app.

Depending on where you live (for example in the European Union, the United Kingdom or California), the law may give you these rights and others, such as objecting to how we use your information or complaining to your data protection authority. Write to us from the address on your account and we'll answer within 30 days.

The site only runs over encrypted connections, passwords are stored as hashes, the keys hosts give us for their other tools are encrypted, and card details never reach our servers. No system is perfectly secure, so if you think your account has been misused, email support@homeshared.app straight away.

Accounts are for adults. We don't knowingly let anyone under 18 sign up. A guest registration can list children who are traveling with an adult; their names are used only for that stay.

HomeShared and the companies that help us run it may store and process information in the United States and other countries, which may have different data protection laws from where you live. Where the law requires it, we use safeguards such as standard contractual clauses for those transfers.

When we change this policy we'll update the date at the top, and if the change matters, tell you by email or on the site before it applies.

Questions or requests about your privacy: email support@homeshared.app, from the address on your account if it's about your account.