Privacy Policy

Hostfield is operated by Ezekiel Madrigal. For anything about your data, write to hello@hostfield.app.

Your host account holds your email address and a one-way hash of your password, never the password itself. We also keep the first name you give when you sign up (or add or change on your Account page) to greet you on your dashboard, and its first word shows on a rental's neighbor page when you are the one on call. When you sign up with a password, we email a link to confirm the address is yours, and the account can't be used until it is opened. Signing in sets one cookie that keeps you signed in for up to 30 days. If you turn on two-step sign-in, we keep the key your authenticator app uses, encrypted, and one-way hashes of your backup codes; turning it off deletes them. If you add fingerprint sign-in, we keep the passkey's public key, its ID and a device label like "Android phone"; your fingerprint or face never leaves your phone, and removing the passkey deletes them.

If you email hello@hostfield.app asking us to set up your rental for you, we use what you send (your listing link, your cleaner's name and phone number, your phone number) only to open your account, add the rental and its cleaner, and connect its calendar, the same as if you had typed them in yourself. We then send you a link to pick your password. The email stays in our support inbox, and we delete it on request.

If you choose Continue with Google, Google tells us your email address and that Google has verified it, and we use that only to sign you in to the Hostfield account with that email, or to open one once you agree to our Terms if there isn't one. Google also shares your basic profile; we keep only your first name from it, and only if you haven't added a name yourself, to greet you on your dashboard (change or clear it on your Account page). We don't keep your photo, and we don't ask Google for your contacts, calendar or anything else. We keep that email and Google's id for your Google account, so the right Google account signs you in. Google handles that sign-in under its own privacy policy. Your password, if you have one, keeps working. If your account already has a password, Google doesn't link itself: sign in with your password, then link Google under Account. The exception is an account whose email was never confirmed: Google proves the email is yours, so that unconfirmed password is removed and the account is yours. You can link or unlink Google under Account, Sign-in and security (unlinking needs a password set first), and remove Hostfield from your Google account's security settings at any time. Continue with Apple works the same way: Apple tells us your email address (or a private relay address, if you choose Hide My Email) and that it's verified, and we keep Apple's id for your Apple account, so the right one signs you in. Apple handles that sign-in under its own privacy policy, and you can stop using Sign in with Apple for Hostfield in your Apple account settings. In the Hostfield phone app, Google and Apple sign-in open in your phone's browser, which hands the app a one-time code that works once, within a minute; we keep only a scrambled (hashed) copy of it.

For each rental you add, we store what you enter: its name and address, an optional photo of it (one you add, or its listing's cover photo copied from a booking platform you connect; shown on your dashboard and its guest guide), door and lockbox codes (including a door code only your cleaner sees), Wi-Fi details, house notes, house records (such as filter sizes, appliance models and paint colors, shown to your cleaner and never to guests), how many beds it has, checklists (including now-and-then tasks and how many days apart they come up), up to 6 "How it should look" photos you add for your cleaner with a word or two on each (shown on your cleaner's page and never to guests), your cleaning guide, and your cleaner's name, phone number and the language to text them in (English, Spanish or Portuguese) if you give them, any days you mark your main cleaner off, and the last day of a pause you set on its empty-house checks. Your list of cleaners keeps each one's name, a nickname if you give one (used to greet them in your texts), phone number, pay per cleaning and text language, the app you pay them with (Venmo, Cash App, PayPal or Zelle) and their username, phone or email there if you add it, used only to open that app with what you owe filled in (no money goes through Hostfield), which of them a cleaning went to, and, for someone one of your cleaners suggested as a backup, the name of the cleaner who suggested them. If you set a short-notice extra on a rental, we keep it and add it to the pay of a cleaning that moved to someone else for today or tomorrow; that cleaner sees it on their page. If your cleaner switches the language on their page, we save that choice on the rental so your next texts start in it. For each cleaning we store its date, the guest's first name if you type one, any one-time request you add for your cleaner (shown on that cleaning's link and in its texts), which tasks your cleaner checked off, their note and photos or videos on how the guests left the place, the other notes and photos they leave (and any videos with an urgent problem they report) (including a note for whoever cleans next, shown on the next cleaning at that rental), when they confirmed they are coming, when they said they were running late and by about how long, when they started, when they marked it guest ready, so you can see how long it took, and when you marked it paid on your pay log. We email you when that happens, when a booking adds or cancels a cleaning or makes it a same-day check-in, when your guests check out, when a cleaner says they'll be there, is running late or can't make it, or reports a problem, when a guest asks for help, when guests arrive today and the cleaning hasn't started 3 hours before check-in or isn't done an hour before, and in a morning heads-up (on Mondays, a week ahead that also lists the week's cleanings) when something needs you: a cleaning nobody has confirmed, booking sync that stopped working, a freezing night at an empty rental, a rental that has sat empty long enough to check on, a permit or tax date, a damage-claim deadline, or in January a cleaner you paid enough last year to need a 1099-NEC, and a week before a cleaning's photos are removed. If you tap Later on a line on your dashboard, we keep which line and when it comes back, so it stays out of your dashboard and morning email for 3 days. We also keep a copy of each of those updates (its short text, the rental name, when it was sent and the page it opens) so the past week shows under Recent on your Needs you page; each copy is deleted after 30 days. You can turn any of those emails off, and choose English or Spanish for them, under Emails and alerts on your Account page, or turn one off with the link at the foot of each one. Password links, plan terms, receipts, a notice when a new way to sign in (a passkey or Google) is added to your account, and important policy changes always come. Now and then the Hostfield team may also email you a personal note about your account, such as an offer to help set it up, and your reply comes to us. To see which tools hosts use most, we count which Hostfield screens you open each day (the screen's name and how many times, nothing on it); those counts are deleted after a year. If you tap Turn on alerts on this phone, under Emails and alerts on your Account page, those same updates also come as alerts on that phone or browser (on a phone with the Hostfield app, only in the app, so it doesn't get the same update twice), and you can choose to get them by email, alert or both. Your phone can also get an alert when a cleaner starts (switchable there too), the first cleaning photo in the guest-ready alert, and a Send to backup button on a can't-make-it alert, which hands that cleaning to your other cleaner. For that we store the address your browser's push service gave for it and the keys that encrypt what we send, and whether it's a phone or a computer, and nothing else about the device. In the Hostfield phone app, we store the app's push address instead. On your phone, Hostfield keeps a copy of the last pages you opened so they still open with no signal, including any door codes on them; signing out deletes them. A photo you share into Hostfield from another app stays on your phone until you add it to a receipt or a damage claim. If you add the home screen widget in the Android app, we store only a scrambled (hashed) copy of its key, and the widget shows today's cleanings by rental, cleaner first name and status, with no guest names or codes; turning it off on your Account page deletes the key. Turn off on this phone, or blocking notifications for Hostfield in your settings, stops them; the updates you turn off there stop both the email and the alert.

If you use them, we also store your shopping list, the pay log of what you paid for each cleaning, an optional guest PIN, and any job you post for local pros. You can also keep receipts (amount, day, what it was for, which rental, and a photo or PDF of the receipt), a damage claim on a cleaning (your note, the amount and your quotes or receipts), your rental's permit number and expiry, how often you file lodging tax, and supply amounts to keep stocked. The year-end tax sheet is built from your pay log and receipts when you open it, and totals what each cleaner earned that year. Its Ask for a W-9 button only opens a text on your phone with the IRS's form link; we don't collect, keep or file tax forms. When you mark an empty rental checked, we keep that day. A job post shows the pros who match it the town, the kind of work, your description, and the phone number you give; they never see the address. An owner report is built from your cleanings when you ask for one, and includes guest first names if your booking sync supplied them. If you send us an idea or a bug report, we keep what you write, a screenshot if you add one, the page you came from, the app version and your browser or phone type, so we can act on it, and any note we write back; we tell you by alert or email when its status changes.

Freeze watch, which you can turn off for each rental, sends your rental's address to the U.S. Census Bureau's geocoder once to find its map coordinates, and those coordinates (never your name or the address) to the National Weather Service each winter morning to read the forecast. Both are free public government services; we store the coordinates on the rental.

On Host Pro you can add one more person to your account, such as a manager or your spouse. We store the name you give them, their email address and a one-way hash of the password they choose. They sign in on their own. As a partner they see and change everything in the account except the plan; as a co-host they see only the rentals you pick, and pay, payouts and receipts only if you turn on Show money. They get the same emails you do for what they can see, which they can turn off for themselves. When either of you texts a cleaner from Hostfield or marks a cleaning done or not needed, the other sees who did it and when. You can remove them at any time and they can leave from their own Account page; either deletes their login. Invite only someone who has agreed to it.

Your cleaner and your guests open their pages from links you send them, with no account needed. Anyone holding a cleaner link or a guest guide link can see what that page shows, including a door code unless you set a guest PIN, so send them only to the people who need them. When your booking sync is working, a guest guide link works only from the day before a guest arrives through their checkout day; in between it shows just the rental's name, unless you keep it open. Your phone number shows on the guide only if you choose to show it. If a guest reports a problem, we store what they write and any photo they add, and email it to you. We do not ask guests for their name or contact details. If you pick someone to be on call for a rental, their first name and phone show on its neighbor page, which anyone who scans the QR code on the house notice you print can open. If a neighbor writes to you there, we store what they write and any name or phone they choose to leave, and email it to you.

If you link a booking calendar, we store the link and read it from Airbnb, Vrbo or wherever it comes from to schedule cleanings on checkout days; we keep the dates, which site the calendar is from, and the Airbnb reservation code its calendar lists (not the phone digits beside it). If you connect Hospitable, Hostaway, OwnerRez, Lodgify or Guesty, we store your access key encrypted, use it to read your properties and reservations (and, only when you tap Send to guest, to post that one message to your guest in their booking's chat through that app), and keep on each cleaning the booking's id in that app and what the booking says: the guest's first name, arrival and departure days and times, party size, pets and infants, the next guest's own note, where the guest booked and that site's reservation code, what the stay paid you, and a quote from any guest review that marked cleanliness down. If the booking app records that the guests checked out, we keep that time too, and use it, or the guest tapping "I'm out" on the guest guide, to tell you the guests have left. Payouts, booking sites, reservation codes and reviews are shown only to you; your cleaner sees the guest details only while their link is open.

When you add a rental from one, we copy its house rules, arrival or checkout instructions, Wi-Fi name and password, and whether it lists a hot tub, grill or fireplace into the form for you to edit. If a linked rental has no photo, we copy the listing's cover photo from that app into our photo storage, when you add or import it or tap Use photo from that app; your own photo is never replaced, and you can change or remove it. For a rental linked to Guesty, we also read its checkout instructions on each booking sync and update the rental's checkout steps, unless you have edited them yourself or turned that off on the rental. For a rental linked to Hospitable, Hostaway or Guesty, in the few days before each cleaning we also read the guest messages on the departing and next bookings to spot a request to check out late or arrive early; we keep only a yes or no on the cleaning, never the messages, and a switch on the rental turns this off. When Hostaway or OwnerRez marks the next booking as the owner's own stay, we note that on the cleaning. For Guesty and OwnerRez, we keep a one-way hash of the guest's id in that app, never the id itself, so we can tell you when a guest has stayed with you before. For Hostaway and Guesty, we read how many of the rental's own tasks in that app are still open and show you the count, and for Guesty we read whether a smart lock on the next booking is offline or low on battery and show you that line; we don't read or keep lock codes.

We keep only the guest's first name, whether it comes from the booking or you type it. The guest guide greets the current guest by it during their stay only, and it appears in your own texts and emails about that stay, such as the ready-early note and the checkout email. If you set a rental so guests message you on Airbnb, the guide's Message on Airbnb button simply opens Airbnb; we pass nothing to Airbnb. Disconnecting deletes the key and unlinks your rentals; you can remove a calendar link or disconnect at any time, and past cleanings stay.

What a host puts in about their guests and cleaners belongs to that host. We hold it and use it only to run the host's tools for them, the way a service provider or processor does under U.S. state privacy laws; we never use it for anything of our own, never sell or share it, and never contact guests or cleaners for marketing.

If you are a guest or a cleaner and want to know what a host has stored about you, or want it corrected or deleted, ask the host, or write to hello@hostfield.app and we will pass it on and help them do it.

When a cleaner finishes a cleaning, their page can ask if they know someone who could fill in. If they add someone, we store that person's name and phone number on the host's cleaners list and tell the host; we don't contact that person. Cleaners should ask the person first. Cleaners can also choose to get texts from Hostfield about their cleanings, by tapping the Text me or WhatsApp me button on a cleaning link and then sending START to Hostfield from that phone, which shows the number is theirs. Only then do we message the number their host gave us for them, by text or on WhatsApp, whichever they turned on: a reminder the day before a cleaning, and, when the main cleaner can't make it, an ask to the backup to take it. We keep a record of each time a number turns texts on or off (the number, when, whether it was on the page or by a reply, text or WhatsApp, the language, and the exact words shown beside the button or the word they texted), the texts we send and get, and use replies like OK, NO and STOP only to answer that cleaning or stop the texts. Replying STOP, or tapping Stop texts on the page, ends them at once. Twilio delivers the texts and Meta delivers the WhatsApp messages for us. Mobile numbers and texting consent are never shared with or sold to anyone for their own marketing, and never used for ours. Instead, or as well, a cleaner can tap Notify me on a cleaning link to get a free alert on that phone when a booking adds, cancels or makes one of their cleanings same-day, and the day before each cleaning, or on My cleanings for every rental saved there. For that we store the address their browser's push service gave for it, the keys that encrypt what we send, the number their host gave us for them, and which hosts' links turned it on, so the alert goes to the right person and only with those hosts' cleanings. Turn off on this phone, or blocking notifications for Hostfield, stops them.

Cleaners can also choose to sign in to My cleanings, which puts their cleanings from every host on one page. It is optional: every cleaner link works the same without it. We email a sign-in link (no password) and, once it is used, store the cleaner's email address, a cookie that keeps them signed in, and the rentals they add from a link a host sent them, with the name and phone number that host has for them there, so we show only the cleanings that go to them. A rental drops off their list when the host gives its cleanings to someone else or makes a new schedule link. This account is the cleaner's own: we use the email only to sign them in and, unless they turn it off on that page or from the email, to remind them the day before and the morning of a cleaning they haven't said yes or no to. We keep the language they signed in with for those emails. We never use it for marketing, and hosts see nothing of it.

Paid upgrades are handled by Stripe. Card details go straight to Stripe and never reach our servers. We keep only the customer and subscription identifiers Stripe gives us, so we know which host account (or listing) a subscription belongs to, your next charge date, and whether you are a founding host, which sets your Host Pro price. If you open your account from another host's invite link, we keep which host invited you and when your first rental earned you both a free month; they see only how many months they've earned, never who. The Card and receipts button opens Stripe's own billing page, where you change your card or download receipts.

Auto-renewal laws ask us to be able to show that you agreed to a paid plan and when you canceled. So we keep a short billing record: your email, the plan, the time you ticked the box to agree to the charge and the exact words beside it, and when the plan started, was canceled, was restarted, or ended. We also note when a host ticked the box agreeing to our Terms at sign-up.

We do not run advertising trackers, and the site sets no tracking cookies. The few cookies it does set are needed for a feature you used, and each one is listed in our Cookie Policy.

We also count page views across the site with Vercel Web Analytics, which sets no cookies and does not identify you. If your browser sends a Global Privacy Control or Do Not Track signal, we do not load it at all.

Only the companies that run the site for us, each for its own part: Vercel hosts the site and counts page views, Neon stores the database, Cloudflare R2 (and Vercel Blob, for files added before we moved to R2) stores rental, cleaning and guest-report photos, cleaners' videos, receipts and claim files, Resend delivers our email, Twilio delivers the texts cleaners turn on, Meta (WhatsApp) delivers the WhatsApp messages cleaners turn on, DeepL translates the checklist tasks a host writes when their cleaner reads the page in Spanish or Portuguese (only the task and room words, never names, codes or contact details, and only while the rental's translate switch is on), Photon (run by komoot, with OpenStreetMap data) suggests matching addresses as you type a rental's address (it gets only the text you type, sent from our server, never your name or account), OpenStreetMap's Overpass service finds the nearest ER, urgent care, grocery store and gas station when you tap Find nearby on a rental (it gets only the map coordinates the Census Bureau's geocoder finds for the address), and Stripe takes payments. If you sign in with Google, Google confirms your email address for that sign-in and shares your first name, and nothing more. If you turn on phone alerts, your browser's own push service delivers them (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, Microsoft for Edge): it gets each alert encrypted, so it can't read the text, and passes it to your phone. In the Hostfield phone app, Google (Firebase Cloud Messaging) delivers alerts on Android and Apple (Apple Push Notification service) on iPhone; to show them, those get the alert's text. If you sign in with Apple, Apple confirms your email address for that sign-in and nothing more. None of them may use your data for anything but providing that service to us. We do not sell personal information, and we do not share it for advertising.

Hostfield staff open your host portal only to help you set it up, for an hour at a time, and each visit is logged. While they are in it, they cannot see your money (booking payouts, pay log, what you pay cleaners, receipts, tax sheet, owner reports and damage claims), your door, lockbox and Wi-Fi codes or guest PIN, what you pay for your plan and when, your guests' names, booking codes, help requests, neighbors' messages or things they left behind, or your cleaners' links, and they cannot change your password, plan or billing. Our admin pages show your account (your email, name, plan and how many rentals you have), not what is in it.

We would also disclose data if the law requires it (a valid subpoena or court order), to protect someone's safety, or to a company that takes over Hostfield, which would have to keep this policy's promises.

Links to other sites, such as a pro's own website or your booking platform, go to companies with their own privacy policies. This policy doesn't cover them.

Everything travels over an encrypted connection. Passwords and sign-in links are stored only as one-way hashes; door and lockbox codes, Wi-Fi passwords, guest PINs, booking platform keys, calendar links and two-step sign-in keys are encrypted; if someone keeps getting a password wrong, we email ourselves the address they tried and where it came from; the database is encrypted on disk and backed up; and only the people who run Hostfield can reach it. No system is perfectly secure; if a breach ever exposes your personal information, we will tell you as the law requires.

Cleaning photos (your cleaner's photos, how the guests left it, issue and left-behind photos) are deleted 90 days after the cleaning, and cleaners' videos 60 days after it. For photos we email you a week before, unless you turned that email off, and each cleaning has a Download photos button so you can keep your own copy. Photos on a cleaning with a damage claim you started, and on the cleaning before it, stay until the claim, rental or account is deleted. So a rental's House history can show the place over time, the photos of its first cleaning each month also stay until the rental or account is deleted; you can stop that on the House history page, and then they go after 90 days like the rest. The rest of a host account, its rentals, cleanings and their notes, guest first names, pay log, receipts, damage claims and guest and neighbor reports stay until you delete the account from its Account page or ask us to, so your cleaning history and owner reports stay complete. Archiving a rental keeps everything and pauses its booking sync and guest guide; deleting an archived rental deletes that rental's cleanings, their photos, its rental photo and "How it should look" photos, pay log, damage claims, guest reports and booking links; its receipts stay with the account. A booking platform key is deleted the moment you disconnect it. The copies of updates under Recent are deleted 30 days after they were sent. Ideas and bug reports you send stay until you delete your account or ask us to. A phone's alert address is deleted when you or your cleaner turn alerts off on it, when its push service tells us it's gone, or with your account. Texts we send and get are deleted after a year. We keep a record of each email we send (the address, subject and whether it went out) for 30 days, so we notice if email stops working; an email that didn't go out is kept in full until it's resent or 7 days pass, then only that record stays. A photo a guest adds to a help request but never sends is deleted after a day. A number's record of turning texts on and off stays while texts are on and for five years after they are turned off, because it is our proof of their consent. A cleaner's My cleanings account stays until they delete it; an unused sign-in link stops working after an hour and is then deleted. A job post closes when you mark it filled or when it expires, and goes with your account. Billing records are the one exception: they are kept for four years after they are made, even if you delete your account or listing, because the law may need them, and then deleted.

Hosts can archive a single rental from Archive or delete at the foot of its settings page, then delete it for good from there. Hosts can download a copy of their account at any time from Download my data, under Delete account at the foot of the Account page: their rentals, cleanings, cleaners, pay log, receipts and guest reports as one file, with every photo and file we store for them, in a zip (passwords, sign-in links and booking platform keys are left out). Hosts can delete their account themselves from Delete account at the foot of the Account page. That deletes every rental, cleaning and guest report under it, and every file we stored for it: cleaning photos, how the guests left it, guest-report photos, rental photos, receipts, damage-claim files, screenshots you sent with a bug report and your guide logo. If our photo storage can't be reached at that moment, we keep retrying daily until those files are gone. It also deletes the login of anyone you added, disconnects every booking platform, and cancels Host Pro with no further charge. Cleaners can delete their My cleanings account themselves from Delete my account at the foot of that page, which deletes their email and their list of rentals and changes nothing for their hosts.

Anyone can ask us to show, correct, or delete what we hold about them, by writing to hello@hostfield.app from the address involved. We answer within 30 days, never charge for it, and treat you no differently for asking. Wherever you live in the U.S., you get the same rights; in states with their own privacy laws, such as California, Colorado, Virginia, Connecticut, Oregon, and Texas, they are also yours by law. To keep your data safe we act on a request once it comes from, or is confirmed at, the email address involved. You can have someone else make a request for you if you also confirm it from that address. If we turn down a request, reply to our answer to appeal and someone will look at it again.

We honor Global Privacy Control: a browser sending it gets no analytics at all (see above). We do not sell personal information or share it for cross-context advertising, so there is nothing to opt out of, and we do not use sensitive information such as a door code or an access key for anything but showing it to the people you send it to.

Hostfield is for adults running rentals and businesses. You must be 18 or older to create an account or list a business. We do not knowingly collect anything from children under 16, and if we learn we have, we delete it.

Hostfield can also show a directory of local service pros. It may be hidden while we focus on hosts, and this part applies only if you use it.

You can browse, filter, and call a pro without giving us anything. If you save pros to a crew, that list and any notes you write about them stay in your own browser and are never sent to us, and your notes are left out of the crew share link. Clearing your browser data clears both.

If you recommend a pro, we store the name you type, the town you say you host in, your email address, your optional note, and a random identifier kept in a cookie in your browser. Your name and town go on the pro's listing. Your email never does: it is there so we can email you a link to confirm the recommendation was really yours, and so the pro can reach you about the job. We also keep a simplified copy of the address (lowercased, with any plus-tag removed) purely to stop one mailbox filing the same recommendation over and over.

If you list a business, we store what you enter on the listing form: business name, contact person, category, the town and state you work from, an optional ZIP code, how far you drive for work, phone, email, optional website, rate, hours, and your description, plus when you agreed to our terms. We turn your town or ZIP into an approximate map point so hosts in towns within your distance find you. Everything except your email address, your ZIP code and that map point is shown publicly, because that is the point of a listing. We email that address your private edit link, notices about your listing (a host vouching for you, a paid spot ending), and a weekly reminder to mark yourself as taking work, which has a one-tap off switch in every copy and on your edit page. Anyone holding your edit link can edit your listing, so treat it like a password.

We count two things per listing, per day, so its owner can see whether the site is working for them: how many times the page was opened, and how many times someone tapped call or text. Those are totals only, never tied to a visitor.

If you ask to hear when a pro lists in your town, we store your email address and that town, and email you when one does, at most once every twelve hours, with a link in each email that takes you off the list and deletes the address. When you search by town or ZIP, or tap Near me, we use it only to find the nearest town; your location is rounded to about a mile and not saved.

A listing stays until its owner deletes it or we remove it, and its recommendations and traffic counts go with it. A town-email address stays until you unsubscribe. Pros can change or delete their listing at any time from their edit link; Delete my listing erases the listing, its recommendations and traffic counts, and cancels any paid plan. If you have lost your link, open your public listing and press Email me the edit link.

Hostfield is built for rentals in the United States and stores everything there. If European data protection law applies to you, Ezekiel Madrigal is the controller of your account, listing, and email data. We rely on our contract with you to run your account or listing, on your consent for town emails (which you can withdraw with one tap), and on our legitimate interest in keeping the site secure and counting page views without identifying anyone. Our service providers move data to the U.S. under the European Commission's standard contractual clauses.

For a guest or cleaner, the host is the controller and we process their data only on the host's instructions. You can ask us to access, correct, delete, export, or restrict your data, or object to how we use it, by writing to hello@hostfield.app. You can also complain to your local data protection authority.

In the last twelve months we collected these categories, all from you, the people you invite, or a booking platform you connect: identifiers (names, email addresses, phone numbers), commercial information (your plan and subscription), internet activity (page counts that do not identify you), photos a host, cleaner or guest uploads, and professional information on business listings. We use them only for the purposes above: running the host tools and the directory, sending the emails you would expect, taking payment, and keeping the site secure.

We disclosed them for a business purpose only to the service providers named under Who else sees your data. We sold none and shared none for advertising. How long we keep each is under How long we keep it.

If we change what we collect or how we use it, we update this page, the date at the top, and the note of what changed before the change takes effect. Hosts see a notice in their portal, and pros see one on their edit link, until they press Got it; we keep only which change they dismissed. If a change affects hosts or listed pros, we email them first.