Safety and policies
Data privacy and guest information handling
As a host, you handle genuinely sensitive personal information about your guests - names, contact details, sometimes ID documents - and treating this responsibly isn't just good practice, it's a real part of the trust guests are placing in you the moment they book.
Only collect information you genuinely need for hosting
Resist the urge to ask for more personal detail than a booking actually requires - a guest's name, contact information, and stay details are typically sufficient, and requesting anything beyond that without a genuine operational reason isn't good practice.
Store any guest information you keep securely
If you keep any notes or records involving guest details outside the platform itself, store them somewhere reasonably secure, not in an easily accessible shared document or an unsecured note, since guest information deserves the same care you'd want extended to your own personal data.
Never share a guest's personal information with a third party
A guest's contact details, ID information, or booking specifics should never be shared with anyone outside the legitimate scope of the booking itself, without the guest's genuine knowledge and consent, regardless of who's asking or how reasonable the request might seem.
Be thoughtful about what you post publicly involving guests
Sharing photos or details from a stay on social media without a guest's awareness or consent, even with good intentions, crosses a privacy line worth avoiding - if you do want to share something involving a guest, ask first, plainly and directly.
Delete information you no longer have a genuine reason to keep
Once a stay is complete and any relevant window for a dispute or claim has passed, there's little reason to continue holding onto detailed personal information about that guest - periodically clearing out old records is a reasonable, responsible habit.
Be cautious about verification requests that seem to go beyond normal process
The platform's own verification process is the appropriate channel for confirming a guest's identity - be wary of any request, from anyone claiming special authority, asking you to independently verify or share sensitive guest information outside that established process.
Use secure, private channels for anything sensitive
If a conversation with a guest involves genuinely sensitive detail, keep it within the platform's own messaging system rather than shifting to a less secure or less accountable channel, since platform messaging carries protections that other channels simply don't.
Understand your own obligations if you use a co-manager
If someone else has access to guest information as part of helping you host, make sure they understand and respect the same standards of care and confidentiality you'd apply yourself, rather than assuming this is automatically understood without being discussed explicitly.
Guest privacy also means respecting their space during the stay
Privacy extends beyond just data - avoid entering a guest's booked space without genuine notice and a legitimate reason, and be transparent about any security camera placement, keeping it strictly limited to exterior, common areas rather than anywhere private.
Respond appropriately if a guest raises a privacy concern
If a guest ever expresses concern about how their information is being handled, take it seriously and address it directly and transparently rather than dismissing the concern, since a guest's comfort with how their data is treated is a genuine part of overall trust in your hosting.
Good data practices protect you as much as they protect guests
Careful handling of guest information isn't purely an obligation to guests, it also protects you from the real reputational and even legal risk that can follow a genuine data mishandling incident, making this a matter of self-interest as well as basic good practice.
Treat this as an ongoing habit, not a one-time policy
Good data handling isn't a box to check once - it's a consistent habit applied to every single guest interaction, worth periodically revisiting as your hosting operation grows and the volume of guest information you handle increases over time.
Be mindful of what you write down in shared or informal notes
A quick note about a guest jotted in a shared spreadsheet or group chat, even something seemingly harmless like a phone number or a passing comment, can end up more widely visible than intended - keep genuinely personal detail out of anything not specifically designed to hold it securely.
Understand that ID documents deserve especially careful handling
If you ever come into possession of a copy of a guest's identification document, for any legitimate reason, treat it with particular care, storing it securely and deleting it once its genuine purpose has been served, since ID documents carry a uniquely high risk if mishandled or exposed.
A privacy-conscious approach builds trust that guests genuinely notice
Guests increasingly pay attention to how thoughtfully their information is handled, and a host who's visibly careful and transparent about this earns a subtle but real trust advantage over one who treats personal data casually or without apparent thought.
When in doubt about a data request, ask why it's genuinely needed
If you're ever asked to provide or verify guest information in a context that feels unclear, a simple, direct question about why it's needed and how it'll be used is entirely reasonable, and any legitimate request should be able to answer that question clearly and satisfactorily.
Apply the same care to your own information as you would a guest's
The habits worth building around guest data, minimal collection, secure storage, timely deletion, apply equally to your own personal and financial information as a host, and treating both with the same consistent discipline reinforces the habit rather than applying it selectively.
Simple digital hygiene reduces risk considerably with very little effort
Using a strong, unique password for your hosting account, enabling any available two-factor authentication, and avoiding shared or public devices for anything involving guest information are all small, low-effort habits that meaningfully reduce the risk of any data ending up somewhere it shouldn't.
Good privacy practice is a quiet but genuine mark of hosting professionalism
Guests may never explicitly comment on how carefully you've handled their information, but consistently good practice here is a real, if invisible, part of running a hosting operation guests can trust with confidence, alongside all the more visible aspects of good hospitality.
Extend the same care to information about your property itself
Beyond guest data, be thoughtful about how publicly you share detailed security information about your own property, such as specific lock codes or entry routines, in places beyond the guest-facing guidebook, since overly public detail here can create an unnecessary security exposure of its own.
A brief, honest privacy note in your guidebook can reassure guests
A short, plain-language line explaining that guest information is used only for the purposes of the stay and handled with care can genuinely reassure a privacy-conscious guest, adding a small but meaningful layer of trust to their overall impression of your hosting, at essentially no real financial cost to you at all to include in your own written guidebook.
