Privacy Policy

CrashPads is an online marketplace connecting traveling professionals with hosts offering short-term, work-ready accommodations. The platform is operated at crashpads.io, headquartered in Inverness, FL with an additional office in Marysville, OH.

References to "CrashPads," "we," "us," or "our" in this policy mean the operator of the platform. "You" or "your" means any individual who accesses or uses the platform, whether as a Guest, Host, or visitor.

Account information: When you register, we collect your name, email address, and authentication credentials. Hosts additionally provide identity verification documents, a display name, and payout banking details.

Listing information: Hosts provide property details including address, photos, amenities, pricing, and availability calendars.

Booking information: Guests provide their name, email, phone number, company name (optional), stay dates, and any special requests when submitting a booking request.

Communications: Messages exchanged through the platform between Guests and Hosts, and communications with CrashPads support.

Reviews and ratings: Feedback submitted by Guests about Hosts or properties, and by Hosts about Guests.

Payment data: Transaction amounts, booking totals, payout records, and invoice numbers. Full card details are processed and stored by our payment processor — CrashPads does not store raw card numbers.

Usage data: Log data including IP address, browser type, device information, pages visited, search queries, and referring URLs collected automatically when you use the platform.

Directly from you: When you create an account, list a space, submit a booking request, leave a review, or contact support.

Automatically: Via server logs, cookies, and analytics tools when you visit or interact with the platform.

From third parties: Via Google OAuth when you sign in with Google, from identity verification providers when completing host verification, and from our payment processor for transaction confirmation.

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Facilitate bookings, payments, and payouts between Guests and Hosts.
• Generate and deliver expense-ready invoices for completed stays.
• Send transactional emails including booking confirmations, receipts, and invoices.
• Communicate with you about your account, bookings, or support requests.
• Verify the identity of Hosts before their listings go live.
• Enforce our Terms of Service and platform policies.
• Detect and prevent fraud, spam, and abusive activity.
• Improve platform features, search relevance, and user experience.
• Send optional marketing communications (only with your consent, and you may opt out at any time).
• Comply with legal obligations including tax reporting and law enforcement requests.

Where applicable law requires a legal basis for processing personal data (such as under GDPR), we rely on the following:

• Contract performance: Processing necessary to provide the platform services you've requested — account management, bookings, payments, and invoicing.
• Legitimate interests: Fraud prevention, platform security, improving our services, and communicating about platform changes.
• Legal obligation: Compliance with tax, financial reporting, and law enforcement requirements.
• Consent: Marketing emails and optional analytics. You may withdraw consent at any time.

We do not sell your personal information. We share data only in the following circumstances:

• Between Guests and Hosts: When a booking is confirmed, relevant contact and stay details are shared between the Guest and Host to facilitate the stay.
• Service providers: We share data with trusted third-party vendors who help us operate the platform — including payment processors, email delivery services, identity verification providers, and analytics tools. These vendors process data only on our instructions.
• Legal compliance: We may disclose data to law enforcement, regulatory authorities, or courts where required by applicable law or to protect the rights and safety of our users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of the platform, user data may transfer to the acquiring entity. We will notify users of any such transfer.

CrashPads requires Hosts to complete identity verification before their listings are published. This process involves sharing government-issued ID with a third-party verification provider. That provider processes and stores verification documents under its own privacy policy — CrashPads receives only a verification status result, not raw document images.

Guest identity verification may be required for certain features or booking types. The same third-party processing model applies.

All payment processing is handled by our payment processor. When you enter card details on the platform, that data flows directly to the processor and is governed by their PCI-DSS compliant systems. CrashPads stores only the transaction outcome, booking total, invoice number, and payout status — never raw card numbers, CVVs, or full banking credentials.

Host payout banking details (such as direct deposit account information) are stored and managed by the payment processor, not by CrashPads directly.

By creating an account, you consent to receive transactional communications from CrashPads — including booking confirmations, invoice deliveries, account alerts, and platform policy updates. These communications are necessary to operate the service and cannot be opted out of while your account is active.

Marketing emails — such as newsletters, feature announcements, and promotional offers — are optional. You may unsubscribe at any time using the link in any marketing email or by contacting support@crashpads.io.

CrashPads uses cookies and similar technologies to operate the platform, maintain authentication sessions, remember preferences, and analyze usage patterns. We use:

• Essential cookies: Required for authentication, session management, and core platform functionality. Cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with the platform so we can improve features and performance. You may opt out by adjusting your browser settings or using a browser extension that blocks analytics tracking.

We do not use advertising or cross-site tracking cookies.

We retain your personal information for as long as your account is active or as necessary to provide the platform services. After account closure:

• Booking and invoice records are retained for a minimum of 7 years to meet tax and financial reporting obligations.
• Reviews remain visible on the platform to maintain community trust, though they are anonymized after account deletion upon request.
• Log and usage data is typically retained for 12–24 months.
• Identity verification records are retained per the requirements of our verification provider and applicable law.

CrashPads implements technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission (HTTPS), access controls, authentication requirements, and regular security reviews.

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@crashpads.io. CrashPads will notify you of any data breach that materially affects your rights as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Withdraw consent for marketing communications or optional analytics at any time.

To exercise any of these rights, contact us at support@crashpads.io. We will respond within 30 days. Some rights may be limited where we have a legal obligation to retain data or where fulfilling the request would affect the rights of others.

CrashPads is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user under 18 has created an account, we will terminate that account and delete associated data promptly. If you believe a minor has provided us with personal information, please contact support@crashpads.io.

CrashPads is operated in the United States. If you access the platform from outside the United States, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. We take steps to ensure that such transfers comply with applicable data protection law, including using standard contractual clauses where required.

The platform may contain links to third-party websites, tools, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through CrashPads. We are not responsible for the content or data practices of external sites.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale: CrashPads does not sell personal information. No opt-out is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at support@crashpads.io with the subject line "California Privacy Request."

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email, platform notification, or by posting the updated policy at crashpads.io/privacy with a revised "Last Updated" date.

Your continued use of the platform after changes become effective constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you must stop using the platform and close your account.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: support@crashpads.io
• Website: crashpads.io
• Headquarters: Inverness, FL
• Additional Office: Marysville, OH