Privacy policy

Inquiries. When you write to a host we collect your name, email address, phone number if you give one, the dates and party size you asked about, and your message. We send it to the host of that villa by email and keep a copy so you and the host have a record and so we can see that the host replied. Hosts are independent businesses; how they handle your details after that is up to them. If the villa’s page is not yet claimed, the inquiry comes to us instead and we answer it for the owner. If the owner’s yearly fee has lapsed, it comes to us and is held for the owner, who receives it when the listing is paid again.

Browsing. Like most sites we log which pages are viewed, roughly where from, on what kind of device, and how the site performed. We use PostHog for this, served from our own domain. It also records sessions so we can watch how people use the search and the villa pages; everything typed into a form is masked in those recordings. PostHog sets a cookie and uses your browser’s local storage to recognize the same visitor across pages; when you are signed in, it ties those visits to your account’s ID, never to your name or email address. Maps are drawn by Mapbox, which receives your IP address when tiles load. Our host, Vercel, keeps standard server logs for a short period.

Account. You need no account to write to a host. If you sign in to save villas or plan a trip, sign-in is handled by Clerk, and we keep your name, your email address, the villas you save, and the trips you plan with everything you add to them.

Writing to us. When you use the contact form we keep your name, your email address, the subject and your message, so we can answer you and keep a record. It is read by us and is not sent to a host.

We never collect a payment method from a guest.

Account. Sign-in is handled by Clerk. We hold your name, email address and, if you sign in with Google, the identifier Google gives us. We never see a password.

Listing. Everything you enter or import about your property is stored with us and published on your listing: text, photos, rates, the address at the level of precision you choose, and the calendar feed URL you give us, which we read on a schedule. If you import from your own website or from Airbnb, Vrbo or Google, we fetch that public page through a third-party fetching service, keep the text, photos and reviews we extract, and discard the rest. Listing text and review summaries may be drafted by an AI model from that material; only the listing content is sent to the model, never your account details.

Billing. Paid plans are charged by Stripe. Stripe collects and stores your card details under its own privacy policy; we keep only your customer and subscription references, the plan, the amount and the invoice history. Referral credits are recorded against your account.

Unclaimed pages. For villas whose owners have not joined, we publish a page built from the villa's public listings on other sites: its name, facts, description and photos, with the area shown approximately and never a street address. The owner can claim it or ask for its removal at any time; removal is done the same day.

Verification. Every listing is reviewed before it goes live. Where your website and other listings do not tie the property to you, we may ask to see a license, tax registration or management agreement. We note that we saw it and when; we do not keep a copy unless you ask us to.

We share data only with the companies that run parts of the service for us, each under its own contract and privacy policy:

• Vercel, for hosting
• Neon, for the database and photo storage
• Clerk, for sign-in
• Resend, for email
• PostHog, for analytics
• Mapbox, for maps
• YouTube and Vimeo, for the videos on some beach pages: a video loads from them only when you press play, though a YouTube video’s still image is fetched from YouTube when the page opens
• Google, for address lookup and reviews
• Apify, for fetching the pages you ask us to import
• Stripe, for host billing
• AI model providers reached through Vercel’s AI Gateway, for listing drafts and review summaries

Servers are in the United States. We do not sell personal data and we do not share it with advertisers.

We will disclose data if the law requires it, or to protect a guest, a host or the site from fraud.

Inquiries are kept while the host’s listing is live and for two years after, so both sides have a record. A guest account, with its saved villas and trips, is kept until you delete them or ask us to close it. Host accounts and listings are kept until you close them, then removed within 30 days apart from invoices, which tax rules make us keep for seven years. Analytics events are kept by PostHog against a random visitor ID, or your account ID when you are signed in, for the period its plan sets, and we read them only as totals; session recordings are deleted after 90 days at the longest, by PostHog’s own retention rules. Backups roll off within 30 days.

You can ask us at any time to show you what we hold about you, correct it, or delete it, and we will do so unless a law makes us keep it. Guests can remove a saved villa or delete a trip themselves, and hosts can edit or remove a listing from the dashboard. To limit analytics, block cookies for this site in your browser or use a tracker blocker; the site works without them. Emails about your inquiry or your listing are part of the service; we do not send marketing email, and if we ever do it will have an unsubscribe link.

The site is not aimed at children and we do not knowingly collect data from anyone under 16.

When this policy changes the date at the top changes with it, and hosts get an email if the change is material. Write to us with any question or request. Our terms of service cover the rest.