Privacy Policy
Last updated: 2026-07-29
This Privacy Policy explains how Nesthopping collects, uses, shares, and protects your personal data. We are committed to transparency and to handling your information responsibly.
Data We Collect
We collect account data (email, authentication identifier, language, signup date), profile information (name, optional phone, city, country, bio, avatar), family details (adults, children, pets, languages, lifestyle), home information (description, approximate location, photos, amenities, rules, availability), activity data (searches, proposals, conversations, agreements, notifications, admin logs), membership payment identifiers from our payment provider (Nesthopping never stores full card numbers), and support and safety records (reports, admin decisions, user-submitted evidence).
How We Use Your Data
We use your data to create and maintain your account, evaluate membership and home approval, display profiles and homes to approved members, facilitate search, matching, conversation, and agreements, process membership payments, prevent fraud, abuse, and spam, comply with legal obligations and privacy rights requests, and send operational communications.
Legal Bases (EU/EEA Users)
For users in the EU/EEA, we process your data under the following legal bases: Contract (account, membership, access, profile, home, matching), Legitimate Interest (human review, anti-abuse, security, audit, fraud prevention), Legal Obligation (tax, accounting, regulatory compliance), and Consent (marketing communications, where applicable).
Service Providers
We may share data with providers necessary to operate the platform: Clerk (authentication), Stripe (payment processing), infrastructure and database providers, image storage and CDN, transactional email services, and analytics (only if configured in a privacy-compliant manner). All providers are bound by contract and appropriate security measures.
Your Rights
You have the right to access your data, rectify inaccurate information, request deletion of your data, obtain a portable copy of your data, object to or restrict certain processing, withdraw consent at any time, and lodge a complaint with a data protection authority where applicable. To exercise any of these rights, contact us at privacy@nesthopping.homes.
Data Retention
Active account data is retained while your account exists. Profiles and homes are kept while active. Messages and agreements are retained as long as necessary for service, security, and reasonable dispute resolution. Admin and security logs are retained for 2 years. Payment and billing records follow applicable tax and accounting obligations. Backups follow a short, documented retention window.
International Transfers
Your data may be processed in countries outside your own. When data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
Children's Data
Nesthopping collects limited information about children only as part of family profiles (number of children and age ranges) to facilitate family-appropriate matching. We do not collect children's names, photos, or contact information. Children cannot create accounts. If you believe a child under 16 has provided personal data to us directly, contact us at privacy@nesthopping.homes and we will delete it promptly.
Law Enforcement and Legal Requests
We may disclose your data to law enforcement, regulatory authorities, or courts when required by applicable law, legal process, or governmental request; when necessary to protect the rights, safety, or property of Nesthopping, its users, or the public; or to investigate or prevent fraud, security threats, or violations of these terms. We will notify you of such requests when legally permitted to do so.
Data Retention and Deletion Exceptions
When you request deletion of your data, we will erase your personal information except where retention is required by law (tax, accounting, regulatory obligations), necessary to resolve an ongoing dispute, investigation, or safety matter, or needed to enforce our terms against accounts terminated for abuse or fraud. Retained data will be limited to what is strictly necessary and will be deleted when the retention ground no longer applies.
Changes to This Policy
Material changes will be communicated with reasonable advance notice. You can always review the current version and its effective date on this page.