Privacy Policy

Version 1.1
Effective date: October 28, 2026
Last updated: October 28, 2026

This Privacy Policy explains how Kipaboo LLC ("Kipaboo", "we", "us") collects, uses, discloses and protects personal information when you use kipaboo.com, kipaboo.co, kipaboo.app and our apps (the "Services"). Kipaboo LLC is a California limited liability company, 111 S. Walnut Ave., Ripon, CA 95366. Contact: support@kipaboo.com.

1. Notice at collection (summary)

  • What we collect: identifiers and contact details, account and booking records, payment and payout details, identity verification results for hosts, listing content and photos, messages, reviews and reports, and device and usage data. Section 3 lists each category.
  • Why: to run the marketplace, process payments and payouts, keep users safe, prevent fraud, meet legal and tax duties, provide support and improve the Services. Section 4 has the details.
  • Sale and sharing: we do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the past 12 months.
  • Sensitive personal information: we use it only for purposes the law allows without a right to limit, such as verifying identity, paying hosts and preventing fraud.
  • How long we keep it: see section 8.
  • Your rights: see sections 9 and 10.

2. Who this policy covers

This policy covers guests, hosts, co-hosts and visitors in the United States. It does not cover information a host collects outside Kipaboo, which is the host's responsibility.

3. Information we collect

Information you give us

  • Identifiers and contact details: name, email address, phone number (if you add one), postal address for hosts and for tax or payout records.
  • Account details: sign-in email, passkey public key (we never receive your private passkey), profile details you choose to add, and your preferences.
  • Booking details: dates, guest count, listing, messages with hosts or guests, change requests, cancellations, and reports about stays.
  • Listing details (hosts): address of the property, photos, description, amenities, house rules, prices and fees, calendar, registration, permit or license numbers and expiration dates, and documents you upload to show them.
  • Identity verification (hosts): a government ID image and a selfie, collected and checked by identity verification providers. We receive the result and limited details such as your name and date of birth, not your full ID image, unless you send us a document directly.
  • Payment and payout details: guest card details are collected and stored by our payment processor, Stripe; we receive only limited details such as card brand, last four digits and expiration. Hosts give bank account and tax details (such as taxpayer ID) to Stripe for payouts and tax reporting; we receive limited details such as the last four digits.
  • Reviews and reports: reviews, ratings, responses, damage claims, stay issue reports, discrimination and safety reports, appeals and the photos or files you attach.
  • Support: what you tell us when you contact us.
  • Host waitlist: if you join the host waitlist, your name, email address, the city and state of your place, how many places you host, and whether you asked for news and tips.

Information collected automatically

  • Device and usage data: IP address, browser and device type, pages viewed, actions taken, dates and times, and approximate location derived from your IP address. We do not collect precise device location.
  • Acceptance records: when you accept our Terms and policies, we record the document, version, time, IP address and browser details.
  • Local storage and cookies: see section 7.

Information from others

  • Hosts and guests may give us information about you, for example in a review, report or claim.
  • Identity verification providers, our payment processor, fraud prevention services and public sources (such as government registration lists) give us results and records.
  • Government agencies may send us notices, for example that a registration number is invalid.

Categories under California law. In the past 12 months we have collected: identifiers; customer records (Cal. Civ. Code 1798.80(e)); characteristics of protected classifications only if you include them in content or a report; commercial information (bookings and payments); internet or other electronic network activity; approximate geolocation; audio, electronic or visual information (photos and uploaded files); inferences limited to fraud and safety risk scores; and sensitive personal information (government ID details and taxpayer ID for hosts, account sign-in credentials, and financial account details for payouts). We collect these from the sources above, for the purposes in section 4, and disclose them to the recipients in section 5.

4. How we use information

  • Create and secure accounts, and sign you in.
  • Show listings, take bookings and requests, place card holds, charge payments, issue refunds and send payouts.
  • Verify host identity, payout accounts and listing registration details.
  • Calculate, collect and remit taxes where we are required to, and keep tax records.
  • Enable messages between hosts and guests, and review messages to prevent fraud, off-platform payment requests and harm.
  • Handle cancellations, stay issues, damage claims, reviews, reports, appeals and support.
  • Detect and prevent fraud, abuse, security incidents and discrimination, and enforce our Terms and policies.
  • Meet legal duties, respond to valid legal requests, and establish or defend legal claims.
  • Tell people on the host waitlist when host signups open, and plan where Kipaboo launches.
  • Send service messages and, if you agree, marketing messages. You can opt out of marketing at any time.
  • Understand how the Services are used and improve them, using data that does not identify you where we can.

Automated decisions. We use automated systems to flag fraud and safety risks, to check registration details, and to make first decisions on some reports, claims and appeals. You can ask for a person to review a decision that affects your account, listing, booking or money by replying to the decision or emailing support@kipaboo.com.

5. How we disclose information

  • Between hosts and guests. When a booking is confirmed, we share what each side needs, such as names, the listing address and check-in details, and guest count. Hosts may also see a guest's reviews. Reviews and listing content are public.
  • Service providers that work for us under contracts limiting their use of the information: payment processing and payouts (Stripe), identity verification providers, cloud hosting and storage, email and text delivery, customer support tools, fraud prevention and security.
  • Tax authorities and governments. Where we collect taxes, or where a law requires, we disclose booking, host and listing details to tax authorities and to agencies that register short-term rentals. We may tell a city or county when a listing's registration number is missing or invalid.
  • Legal reasons. We disclose information when we believe in good faith it is needed to comply with law, a court order or a valid request from law enforcement or another government office; to protect someone from death or serious bodily harm; to prevent fraud; or to enforce our Terms.
  • Business transfers. If Kipaboo is involved in a merger, acquisition or sale of assets, information may transfer to the buyer under this policy.
  • Affiliates, only to run the Services under this policy.
  • With your consent or at your direction.

We do not sell personal information or share it for cross-context behavioral advertising, including about users under 16. We do not disclose personal information to third parties for their own direct marketing.

6. Payment information and Stripe

Our payment processor, Stripe, collects and processes card and bank details and some identity details for hosts, under its own privacy policy at stripe.com/privacy. Stripe acts as our service provider for payment processing and as an independent business for its own legal duties, such as anti-money laundering checks.

7. Cookies and local storage

We use cookies and browser local storage that are needed to run the Services, such as keeping you signed in, remembering your search and preferences, and protecting against fraud. We may measure usage with analytics that do not use your name or email address. We do not use advertising cookies or allow third parties to track you across other sites through the Services. Your browser settings let you clear cookies and local storage, but some features may stop working. We honor Global Privacy Control signals as a request to opt out of sale and sharing, even though we do not sell or share.

8. How long we keep information

We keep personal information only as long as needed for the purposes in this policy:

  • Account details: while your account is open, then up to 3 years after closure for support, fraud prevention and legal claims, unless a longer period below applies.
  • Booking, payment, payout, tax and refund records: at least 7 years after the booking or transaction, as tax and financial laws require.
  • Acceptance records: kept for as long as the agreement could matter; the IP address and browser details are removed after 2 years.
  • Reviews: while shown on the Services, and for records purposes after removal as described above.
  • Messages: 3 years after the related stay, or longer if part of a report, claim or dispute.
  • Reports, claims, appeals and discrimination complaints, with attached files: 7 years after they are closed.
  • Identity verification results: while the host account is open and 7 years after; verification images are kept by identity verification providers only as long as their contracts with us allow.
  • Device and usage logs: up to 2 years, unless needed for security or a legal claim.
  • Host waitlist entries: until you sign up as a host or ask us to remove you, and no longer than 24 months after our last email to you. If you unsubscribe, we keep your email address on a do-not-email list so we can honor your choice.

We may keep information longer if the law requires it or for an active legal claim or investigation.

9. Your privacy rights

Depending on where you live, you may have the right to:

  • Know what personal information we collect, use and disclose, and get a copy in a portable format.
  • Correct inaccurate personal information.
  • Delete personal information, subject to exceptions (for example, records we must keep for taxes, fraud prevention or legal claims).
  • Opt out of the sale or sharing of personal information and of targeted advertising. We do neither.
  • Limit the use of sensitive personal information. We use it only for purposes the law allows without this right.
  • Opt out of profiling that produces legal or similarly significant effects. We don't use profiling for those kinds of decisions, and you can ask for a person to review any automated decision about your account, listing, booking or money (see section 4).
  • Not be treated differently for using your rights.

How to make a request. Email support@kipaboo.com with the subject "Privacy request", or use your account settings. We will verify your identity by confirming control of your account email, and may ask for more information for requests about sensitive data. An authorized agent may make a request for you with your signed permission, and we may ask you to confirm your identity directly. We respond within the time the law requires.

Appeals. If we deny your request, you can appeal by replying to our decision or emailing support@kipaboo.com with the subject "Privacy appeal". If you are unhappy with the appeal result, you may contact your state attorney general.

10. California and other state notices

  • California (CCPA as amended by CPRA). Sections 1, 3, 4, 5, 8 and 9 are our notice at collection and privacy policy disclosures. We do not sell or share personal information, so we do not offer a "Do Not Sell or Share" link. We do not offer financial incentives for personal information.
  • Shine the Light (Cal. Civ. Code 1798.83). We do not disclose personal information to third parties for their direct marketing.
  • Other states. Residents of Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with consumer privacy laws may use the rights in section 9 as their state law provides, including the right to appeal.
  • Nevada. We do not sell covered information as defined by Nevada law.

11. Security

We use administrative, technical and physical safeguards, such as encryption in transit, passkey and email link sign-in, access controls and logging. No system is perfectly secure. If we learn of a security breach affecting your personal information, we will notify you as the law requires.

12. Children

The Services are for people 18 and older. We do not knowingly collect personal information from children under 13, or from anyone under 18 as an account holder. If you believe a child has given us information, contact us and we will delete it.

13. Where information is processed

We operate in the United States and process information in the United States.

14. Changes to this policy

We will post any change with a new version number and date, and tell you by email or in the Services before a material change takes effect.

15. Contact

Kipaboo LLC, 111 S. Walnut Ave., Ripon, CA 95366. Email: support@kipaboo.com.