Privacy policy

Effective October 2026. BoulderStay is operated from Boulder, Colorado.

What we collect. Your name, email address and phone number when you create an account or book; the dates, guest count and notes for each stay; messages you send through the site; and, for hosts, the listing details, address and license number you enter.
Payment. Card payments are processed by Stripe. Your card number goes to Stripe, not to BoulderStay. We store only Stripe’s references (customer and payment IDs) so a host can file a deposit claim or a refund can be issued.
Why we use it. To take and manage bookings, relay messages between guests and hosts, send booking and stay emails, calculate lodging taxes, and handle deposit claims and cancellations. Hosts see the name, email and phone of guests who book with them.
Messages. Messages between guests and hosts are stored on the site and relayed by email. Replying to one of those emails posts the reply to the conversation on the site.
Cookies. We set a cookie to keep you signed in. There is no advertising, no ad tracking and no third-party analytics cookies.
Location. Listing addresses are kept private. Public pages show an approximate area (offset by a few hundred meters). The exact address is shared with a guest once a booking is confirmed.
Who else sees data. Stripe (payments), Resend (email delivery), Vercel and Neon (hosting and database), and Vercel Blob (photos). We do not sell or rent personal data.
Retention. Booking, payment and tax records are kept for seven years to meet tax and dispute obligations. Messages are kept with the booking they belong to. You can ask us to delete your account; records required for tax or dispute purposes are retained.
Your choices. You can update your name, phone and email preferences in your account. To access, correct or delete your data, email hello@boulderstay.com.
Changes. If this policy changes, the effective date above is updated and the new version is posted here.

See also the guest terms and host agreement.