Privacy Policy

Account details (name, email, phone), listing content (photos, descriptions, locations, drawn property boundaries), booking records, messages between guests and hosts, reviews, favorites, community (Campfire) posts, listing view counts (aggregate, shown to hosts as analytics), and verification documents you choose to submit (government ID and selfie, stored privately and visible only to our review team).

Like most websites, we automatically receive some technical data when you use Overlnd: IP address, browser and device information, and timestamps of requests. We use this for security, rate limiting, and fraud prevention. If you enable notifications in the mobile app, we store a push token for your device so we can deliver them.

We use essential cookies only — session cookies that keep you signed in and make the site function. We do not use third-party advertising or cross-site tracking cookies, and we don't run third-party ad networks.

Hosts can verify their identity automatically through Stripe Identity: your ID document and selfie are collected and biometrically checked by Stripe under Stripe's own privacy policy — Overlnd receives only the outcome (verified or not), never the documents or biometric data. Hosts who connect a Stripe payout account are similarly verified through Stripe's onboarding.

Card details go directly to Stripe — Overlnd never sees or stores full card numbers. Direct payments between guests and hosts (cash, Zelle, Venmo, Cash App, PayPal) happen entirely outside our systems.

Exact addresses and property boundaries are revealed to guests only after a confirmed booking. Public listing pages show an approximate area when the host enables location privacy.

To operate the marketplace: showing listings, processing bookings, sending transactional notifications (booking requests, messages, receipts), fraud prevention, and legal compliance. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising.

We share data with the vendors that run the platform: Supabase (hosting and database), Vercel (web hosting), Stripe (payments and identity), Mapbox and Google (maps and geocoding), Resend (email), and Expo (mobile app builds and push notifications). Each processes data only to provide its service to us.

Some content on Overlnd can include information about non-users. Reviews imported by hosts from other platforms (e.g. Airbnb, Vrbo) include the reviewer's first name and profile photo as published on the source platform, and messages may mention other people. If you appear in imported content and want it removed, contact privacy@overlnd.com and we'll take reasonable steps to remove it.

We keep your data while your account is active. When you delete content or your account, we delete or de-identify associated personal data within a reasonable period, except records we need to retain for legitimate business or legal purposes — bookings, payment records, and tax-relevant data are kept as required by law; content already shared with others (e.g. reviews and messages) may persist for the other party.

Data is encrypted in transit (TLS) and at rest by our hosting providers, access is limited by row-level security and role-based controls, and verification documents are stored in private storage accessible only to our review team. No system is perfectly secure — if we learn of a breach affecting your data we'll notify you as required by law.

You can update your profile, delete listings, and request account deletion at any time. Booking and payment records may be retained as required for legal and tax purposes. The messages we send today are transactional (bookings, messages, receipts). If we ever send marketing email, it will include an unsubscribe link and honoring it won't affect transactional messages. Push notifications can be turned off in your device settings.

California residents may request access to, correction of, or deletion of their personal information, and to know what categories we collect (listed above) and why. We don't sell personal information, so there is nothing to opt out of selling. To exercise these rights, email privacy@overlnd.com — we'll verify your identity and respond within the time required by law, and we won't discriminate against you for exercising them. Our site does not respond to browser "Do Not Track" signals, because we don't track users across third-party sites in the first place.

Overlnd is not directed to children and is only for users 18 and older. We do not knowingly collect personal information from anyone under 18 — if you believe a minor has provided us data, contact privacy@overlnd.com and we'll delete it.

Overlnd operates in the United States and data is stored and processed on servers in the United States.

We'll post updates here with a new "last updated" date, and for material changes we'll give notice by email or in the product. Questions: privacy@overlnd.com.