Legal

Privacy Policy

This policy explains what personal data NESTIFY holds, why we hold it, how long we keep it, and the rights you can exercise over it.

Last updated 10 September 2026

1. Data we collect

  • Account data — name, email address, phone number and password credentials.
  • Booking data — stays, dates, guest counts, amounts, currency and payment method type.
  • Host data — application details, business information, payout preferences and verification documents.
  • Communications — messages exchanged with hosts or support, and special requests.
  • Technical data — device, browser and usage information collected through cookies you allow.

2. Why we use it

  • To create your account and provide the booking and hosting services you request (contract).
  • To verify hosts and prevent fraud or abuse (legal obligation and legitimate interest).
  • To send service messages such as confirmations and check-in reminders (contract).
  • To improve the product and measure marketing, where you have allowed those cookies (consent).

3. Who we share it with

We share only what is necessary: the host of a residence you book receives your name, stay dates and any requests you send; payment and infrastructure providers process data on our instructions; and authorities receive data where the law requires it. We do not sell personal data.

4. International transfers

NESTIFY operates across multiple markets, so your data may be processed outside your country of residence. Where that happens, we rely on recognised transfer safeguards such as standard contractual clauses.

5. How long we keep it

Account and booking records are retained while your account is active and for the period required by tax and accounting rules afterwards. Verification documents are deleted once the retention period for the relevant market expires. Deleting your account removes your profile, bookings and host records from the platform.

6. Your rights

You can request access to your data, correct it, object to certain processing, withdraw consent, and ask us to delete your account. Guests and hosts can do the first and last of these instantly from their account.

7. Security

Data is encrypted in transit, access to production data is limited to staff who need it, and verification documents are stored in private storage reachable only through short-lived signed links.

8. Cookies

Cookie use, categories and how to change your choices are described in the Cookie Policy.

9. Contact and complaints

Contact our privacy team through the support channels in your account. If you are in the EU or UK you also have the right to complain to your local data protection authority.