- Home
- Privacy Policy
1. Introduction
TabiVista ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Platform").
By using TabiVista, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use our Platform.
2. Information We Collect
Information You Provide
We collect information you voluntarily provide, including:
- Account Information: Name, email address, phone number, password, and profile photo
- Identity Verification: Government ID photos (when required by host). Photos are re-encoded to strip metadata, stored securely, and automatically deleted 30 days after checkout or immediately upon booking cancellation
- Welcome Guide Data: WiFi network names and passwords, check-in instructions, house rules, and local tips that hosts add to their property welcome guides
- Rental Agreements: Agreement acceptance timestamps, IP addresses (for ESIGN Act compliance), and a snapshot of the agreement text at the time of acceptance
- Payment Information: Credit card details, billing address (processed by Stripe)
- Booking Details: Check-in/out dates, guest counts, special requests
- Communications: Messages with Hosts/Guests, customer support inquiries
- Reviews & Ratings: Feedback you provide about stays and experiences, and — for hosts — about guests
- Damage Claims & Disputes: If a host files a security-deposit damage claim, we collect the claim reason and any evidence photos. If you (as a guest) dispute a claim, we collect your written response and any counter-evidence photos. All such photos are re-encoded to strip metadata, stored securely outside the public web (accessible only to the booking's host, guest, and our review team), and automatically deleted 90 days after the claim or dispute is filed
- Message Attachments: Photos you attach to messages with a host or guest. They are re-encoded to strip metadata and stored securely outside the public web, accessible to the two participants in the conversation and to our support and trust & safety team, who may review message content (including photos) for moderation, support, safety, and dispute resolution
- Property Information: Listing details, photos, amenities, house rules (for Hosts)
Information Collected Automatically
When you use TabiVista, we automatically collect:
- Device Information: Device type, operating system, browser type, unique device identifiers
- Usage Data: Pages visited, features used, search queries, booking history
- Location Data: IP-based location, and with your permission, precise GPS location
- Log Data: Access times, referring URLs, error logs
- Push Notification Data: If you opt in, we store your device's push subscription endpoint and encryption keys to deliver notifications
Information from Third Parties
We may receive information from:
- Social Login Providers: If you sign up or sign in with Google, we receive your name, email address, profile picture, and Google account identifier from Google. A Google-verified email address is treated as verified, so we do not send a separate verification email.
- Payment Processors: Transaction confirmation from Stripe
- Property & Calendar Platforms: Listing data synced from Airbnb (if you connect your account), availability data imported from any iCal calendar URLs you connect (such as Vrbo, Booking.com, or other platforms), and listing, pricing, and availability data synced through Hospitable, if you connect it
3. How We Use Your Information
We use collected information to:
Provide Our Services
- Create and manage your account
- Process bookings and payments
- Facilitate communication between Hosts and Guests
- Send booking confirmations and updates
- Provide customer support
Improve & Personalize
- Analyze usage patterns to improve our Platform
- Personalize search results and recommendations
- Develop new features and services
Safety & Security
- Verify user identities
- Detect and prevent fraud
- Enforce our Terms of Service
- Comply with legal obligations
Communications
- Send service-related notifications (booking updates, policy changes)
- Send promotional communications (with your consent)
- Respond to your inquiries
5. Third-Party Services
TabiVista integrates with the following third-party services:
Stripe (Payment Processing)
We use Stripe to process payments securely. When you make a payment, your card information is sent directly to Stripe and is subject to Stripe's Privacy Policy. We do not store your complete credit card number.
Google Maps
We use Google Maps to display property locations and provide directions. Your use of map features is subject to Google's Privacy Policy.
Google Places
We use Google Places to display ratings and information about dining and experience venues.
Sentry (Error Monitoring)
We use Sentry to track errors and improve our service. Error reports may include technical information about your device and the action that caused the error.
Google Analytics
We use Google Analytics to understand, in aggregate, how visitors find and use the Platform (pages viewed, traffic sources, general region). This helps us improve the site. Your use is subject to Google's Privacy Policy.
Microsoft Clarity (Product Analytics)
We use Microsoft Clarity to understand how visitors interact with the Platform through anonymized session recordings (such as mouse movement, clicks, and scrolling) and aggregated heatmaps. We use this data only to diagnose usability problems and improve the experience. Your use is subject to the Microsoft Privacy Statement.
Airbnb Integration
If you sync your Airbnb listing, we import property details, photos, availability, and guest reviews. Reviews from Airbnb are displayed on your TabiVista listing to help travelers make informed booking decisions. We do not access your Airbnb account credentials.
Hospitable (Calendar & Pricing Sync)
If you connect your listings through Hospitable, we share your name and email address with Hospitable to establish the connection, and we receive your listing details, nightly prices, minimum-stay rules, and availability from your connected channels. We use this data solely to keep your TabiVista listing's calendar and pricing in sync. The connection is read-only and we never receive guest personal information through it. Your use of the connection is subject to Hospitable's Privacy Policy. You can disconnect at any time from your host dashboard, which removes the synced pricing and availability data.
Anthropic (AI Content Generation)
We use Claude by Anthropic to generate property-specific content such as FAQs, SEO titles, listing summaries, and labeled summaries of a listing's guest reviews. Only publicly visible content is sent to Anthropic for content generation: property information (amenities, general location such as neighborhood and city, house rules) and the text of publicly posted guest reviews (without reviewer names or profile details). No personal user data or exact addresses are shared. See Anthropic's Privacy Policy for more information.
6. SMS Communications
TabiVista uses SMS (text messaging) to send verification codes when you register or verify your phone number. By providing your phone number and checking the SMS consent box, you agree to receive these messages.
What We Send
- Verification Codes: One-time passwords (OTP) sent when you verify your phone number or log in using two-factor authentication
Message Frequency
You will receive up to 5 SMS messages per verification request. Verification codes are only sent when you initiate a verification request. You will not receive marketing messages via SMS.
Mobile Data Privacy
Your mobile phone number and SMS opt-in data will never be shared with or sold to third parties or affiliates for marketing or promotional purposes. We only use your phone number to send verification codes directly from TabiVista.
Costs
Message and data rates may apply depending on your mobile carrier and plan. TabiVista does not charge for SMS messages, but your carrier may.
Opting Out
You can opt out of SMS communications at any time by:
- Replying STOP to any message from TabiVista
- Unchecking the SMS consent box in your Account Settings
- Contacting us at support@tabivista.com
Note: Opting out of SMS may limit certain account features that require phone verification.
Help
For help with SMS, reply HELP to any message or contact support@tabivista.com.
Our SMS Provider
We use Twilio to deliver SMS messages. Your phone number is shared with Twilio solely for the purpose of message delivery. See Twilio's Privacy Policy for more information.
8. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data transmitted via HTTPS/TLS encryption
- Password Security: Passwords are hashed using bcrypt
- Payment Security: PCI-compliant payment processing through Stripe
- Access Controls: Limited employee access to personal data
- Rate Limiting: Protection against brute-force attacks
- Content Security Policy: Protection against XSS attacks
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
9. Data Retention
We retain your information for as long as:
- Your account is active
- Needed to provide our services
- Required by law (tax records, legal disputes)
- Necessary for legitimate business purposes
Automatic Data Deletion
- Guest ID photos are automatically deleted 30 days after checkout, or immediately upon booking cancellation, decline, or expiry
- Deposit claim photos (host evidence) are automatically deleted 90 days after the claim is filed
- Dispute counter-evidence photos (guest response) are automatically deleted 90 days after the dispute is filed
After Account Deletion
When your account is deleted:
- Your profile, listings, and personal data are removed
- If you have booking history, your account is anonymized rather than deleted to preserve financial records required for tax and legal purposes
- Anonymized data may be retained for analytics
- All uploaded files (profile photos, property images, ID documents) are permanently deleted
10. Your Rights
Depending on your location, you may have the following rights:
Access & Portability
You can request a copy of your personal data in a portable format.
Correction
You can update your account information through your profile settings or request corrections to inaccurate data.
Deletion
You can request deletion of your account and personal data. Some data may be retained for legal compliance.
Opt-Out
You can opt out of:
- Marketing emails (click "unsubscribe" in any promotional email)
- Push notifications (through your Account Settings or your device's notification settings)
When you disable push notifications, your subscription data is deleted from our servers.
For California Residents (CCPA)
California residents have additional rights including:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising privacy rights
We do not sell personal information.
For EU/UK Residents (GDPR)
EU and UK residents have rights including access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact us at privacy@tabivista.com.
11. Children's Privacy
TabiVista is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@tabivista.com.
12. International Data Transfers
TabiVista is based in the United States. If you access our Platform from outside the US, your information may be transferred to and processed in the United States or other countries where our service providers operate.
We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- Sending an email notification for significant changes
We encourage you to review this policy regularly.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Privacy inquiries: privacy@tabivista.com
- General inquiries: hello@tabivista.com
- Contact form: Contact Us
For data subject access requests or to exercise your privacy rights, please email privacy@tabivista.com with "Privacy Request" in the subject line.