This Privacy Policy is issued by the operator of the Yall Come Back service, including its owners, officers, contractors, and affiliates (“Yall Come Back,” “we,” “us”). It is effective September 7, 2026. It should be read with our Terms of Service.
1. Information we collect
You give us
- Account data: name, email, phone, password (stored as a hash), addresses, emergency contact if you add them.
- Host data: brand, listings, photos, rates, calendars, house rules, tax settings you enter, payouts you describe, messages.
- Booking data: dates, guest count, pets, notes, deposit amounts, payment method chosen, and whether a host marked a deposit paid.
- Messages you send in the inbox.
- Support notes you send through Contact or in-app.
We collect automatically
- First-party product analytics: page path, referrer (origin and path, no query string), UTM source/medium/campaign, device type (phone, tablet, or desktop), timestamp, and an anonymous visitor id from a first-party cookie. We do not store raw IP addresses or the full browser user-agent in those records.
- Cookies and similar storage for sign-in, security, preferences, and first-party analytics (see § 6).
- Public API requests if you or an agent call documented endpoints.
From others
- Calendar feeds (iCal) you or a host connect.
- Payment processors, if we later enable cards — tokenized payment status, not full card numbers.
- Information a host or guest types about you in a booking or message.
We do not intentionally collect sensitive data such as government ID numbers, precise GPS of your phone, or health data, unless you put it in a message or listing. Please do not.
2. How we use information
We use information to:
- create and secure accounts;
- publish listings and host websites you ask us to publish;
- run search, availability, booking requests, and holds;
- deliver in-app messages (and email later, if we turn email on);
- calculate quotes, including tax lines a host configured;
- bill platform hosting fees when you are on a paid plan;
- detect fraud, abuse, and security incidents;
- count visits, booking funnel, and social-campaign attribution in first-party analytics (no third-party analytics services);
- comply with law and enforce our Terms;
- improve the product, in aggregated or de-identified form when we can.
We do not use your content to train public AI models. Optional host tools (for example pricing research on the hosted platform) run only for hosts who have that add-on, using listing and market data as described in product docs — not your private messages.
3. How we share information
We share information when:
- Hosts and guests need it to complete a stay. A host sees the guest name, contact, dates, party size, and notes for their booking. A guest sees the host brand and listing details the host published.
- You publish it. Public listing pages, host sites, and optional marketplace pages are visible to anyone, including search engines if the host allows that.
- Service providers host the app, database, files, or (later) mail and card payments. They may process data only to provide that service.
- Law and safety. We may disclose information if we believe in good faith it is required by law, valid legal process, or to protect people, property, or the Platform.
- Business transfer. If we sell or reorganize the operation, information may move with it, still under this policy or a successor that is at least as protective.
We do not sell personal information as that term is used in US state privacy laws, and we do not share it for cross-context behavioral advertising.
4. Payments
Card payments are not enabled. Hosts confirm deposits by hand (or another method they offer). We may store that a deposit is pending or marked paid, and a transaction note a host types. We do not store full card numbers. If we enable cards later, the processor’s privacy policy will also apply, and we will update this section.
Bitcoin addresses and transaction IDs you or a host paste are treated as booking records. Blockchain activity is public by nature; we do not control that.
5. Messages
In-app messages are stored so you and the other party can read them. We may access messages to operate the inbox, debug, prevent fraud, or comply with law. Platform email delivery is not live; do not assume a copy left the app.
6. Cookies
We use cookies and similar storage to:
- keep you signed in (session and CSRF cookies);
- remember a host brand an operator is editing;
- remember whether you chose Find a Place, Host a Place, or just browsing, so we do not ask again on the home page;
- save on-device lists such as saved stays, where the product does that;
- anonymous first-party analytics: a visitor id cookie and first-touch UTM tags so we can count visits and credit bookings, guest signups, or host signups to the social post or platform that brought you here. We do not sell this data or send it to third-party analytics services.
These are primarily necessary and functional cookies, plus first-party analytics. We do not run third-party advertising or analytics networks on the Platform today. You can block cookies in your browser; some features (sign-in) will not work.
7. Retention
We keep account, listing, and booking records for as long as the account is open and as long as we need them for disputes, taxes hosts configured, security, and legal retention. We may keep backup copies for a limited time. Hosts may have their own retention duties; that is their obligation, not ours.
8. Security
We use reasonable administrative and technical measures (hashed passwords, HTTPS, access controls). No method of transmission or storage is completely secure. You use the Platform at your own risk. Tell us promptly if you think your account was accessed without permission.
9. Children
The Platform is for adults. We do not knowingly collect personal information from children under 13 (or under 16 where that is the rule). If you believe we have, use the Contact page and we will delete it.
10. Your choices
- Update profile and privacy toggles under Account settings.
- Hosts control what they publish on listings and brand pages.
- You may ask us to correct or delete account data that is not needed to keep a completed booking record.
- To close an account, use Account settings or the Contact page. We may retain what the law or these records require.
If you are a consumer in a US state with a privacy statute (for example California, Texas, or others as they apply), you may have the right to know, delete, or correct personal information, and to opt out of “sale” or targeted advertising. We do not sell personal information or use it for cross-context ads. To exercise a right, use the Contact page and tell us which right you mean. We will not discriminate against you for asking. We may need to verify it is you.
We are based in the United States. If you access the Platform from elsewhere, you understand your information is processed in the US.
11. Hosts as independent controllers of stay data
When a host receives guest details to fulfill a stay, the host is responsible for how they use that information off the Platform (for example, storing it in their own records). Our Terms require hosts to use guest data only to host that stay and as law allows. We are not liable for a host’s misuse.
12. Changes
We may update this policy. The effective date will change. Material changes will apply going forward. Continued use means you accept the update.
13. Contact
Privacy requests: the Contact page on yallcomeback.app. Platform email is not a monitored inbox until we say it is.
These pages are the rules for using Yall Come Back. They are not a substitute for advice from your own lawyer, tax professional, or insurance agent.