Public profiles, private stay records and payment documents have different audiences. The sections below explain what is collected, how it is used and how to make a privacy request.
Who this policy covers
Base Crashpads operates basecrashpads.com and its traveler, homeowner and operations portals. This policy explains how we collect, use and disclose information when you browse, request lodging, list a property, communicate with us or complete a stay. Contact us at basecrashpads@gmail.com or (515) 556-8376 with privacy questions.
AFCrashpad.com remains a separate website. Inquiries may be handled by the same company team and customer-management systems. This policy covers information collected through Base Crashpads and used to provide its services; other websites and independent providers may have their own policies.
Information we collect
We receive information directly from you, from people involved in your stay, from the services you use to sign in, and from the operation of our website.
- Account and profile information: name, email, phone, Google account identifier and available profile information, chosen account mode, profile photo, biography, hometown, interests and other details you choose to provide.
- Lodging and property information: installation, dates, party size, accommodation and pet preferences, relevant travel circumstances, property address, photographs, amenities, rules, availability, bids and agreed fees.
- Stay records: offers, selected benefits, communications, support tickets, uploaded leases and supporting files, signed agreements, signature timestamps and signing audit information, move-in arrangements, external payment confirmations, receipts and feedback.
- Private payment information: homeowner payout instructions and the cardholder, billing and card details supplied when completing a Payment Authorization Form. Card details entered in that signing flow are included in the protected signed authorization PDF. Card charging occurs outside this website.
- Technical information: browser and device information, request and security logs, pages visited, referral and campaign information, and website performance and inquiry activity. Providers may receive your IP address when serving the site or processing a request.
How we use information
We use information to provide and support your account and stay, including:
- Signing you in, saving your preferences and allowing one account to operate as both a traveler and homeowner.
- Reviewing listings, checking requested properties, inviting eligible homeowners, collecting bids, preparing offers and coordinating reservations.
- Preparing and reviewing agreements, recording signatures, coordinating external payments, preparing receipts and fulfilling agreed benefits.
- Sending service messages, resolving support requests, reviewing feedback and preventing misuse or unauthorized access.
- Understanding how visitors find and use the site, improving its reliability, keeping business records and responding to legal obligations or disputes.
Optional email updates
Marketing emails are optional. Sign-in includes a preselected email-updates option that you can uncheck. Leaving it selected may send a one-time confirmation to your verified account email, using your traveler or host mode to suggest relevant updates. You are not subscribed until you confirm. Signing in does not change an existing subscription, unsubscribe choice or delivery restriction. We record your selected interests, preferred bases and confirmed consent. Use the preferences link in a marketing email to change your interests or unsubscribe. Essential reservation and account messages are managed separately.
We use Amazon Simple Email Service for marketing delivery and record delivery, bounce, complaint, open and click events. Opens and clicks can include automated inbox activity. A signed email link may set a cookie for up to 30 days to connect that visit to a lodging request or property submission made using the same email address; a confirmed booking can inherit its original request’s attribution. We respect Do Not Track and Global Privacy Control for this website attribution. We also use completed account actions to stop reminders you no longer need.
Company Gmail connection
A company administrator may authorize read-only Gmail access to organize business conversations in our contact directory. We import matching messages to and from existing contacts, starting with the previous six months, and periodically update that history. Stored information includes the subject, sender, recipients, date, message text and attachment filenames. Attachment contents are opened in Gmail rather than imported. Other mailbox messages are not added to the CRM.
Imported Gmail messages are visible only to authorized company administrators. We use this information to manage customer communications, not for advertising, sale, or training general-purpose AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. The mailbox owner can disconnect from People & accounts to remove imported messages and the stored connection, or revoke access in their Google account. CRM contact records and separately recorded business notes remain.
Traveler referrals
When a person opens a personal referral link, a signed first-party cookie can retain the referral code for 30 days to credit a qualifying request made in that browser. We keep the referrer, referred request, reward terms, eligibility decisions and payment confirmations as business records. Referrers can provide a payment-service username, email or phone number and the name on that account so company operations can arrange their reward.
A referrer sees only the referred traveler's abbreviated name and broad reward progress. Their contact information, property, travel dates and payment records are not shared. Referral participation does not subscribe either person to marketing emails.
What other people can see
Public profiles can display the profile details you choose to share, your photo, completed-stay counts and reviews approved for the relevant audience. Public property pages show approved listing information. Contact details, payment information, signature records and internal company notes are not part of a public profile. Information you publish may be copied or indexed by others.
Homeowners receiving a lodging request can see the request information needed to assess the stay and the traveler's public profile. The selected traveler and homeowner receive the contact details, occupancy arrangements and documents needed for their roles. A homeowner's bid is not displayed to competing homeowners.
Private homeowner payout instructions are available to the homeowner and authorized company operations. Payment Authorization Forms are restricted to authorized company personnel and the authorized traveler or signing recipient; they are not supplied to homeowners. Treat private signing and document links as confidential.
Sharing a review publicly requires the relevant permission and company moderation. Private feedback is not automatically turned into a public testimonial. You can change available profile fields in the portal and contact us about removing shared information.
Service providers and other disclosures
We use service providers to operate the website and the business. These include Google/Firebase for authentication, records, storage and mapping; Vercel for hosting, analytics and performance; Resend for service email; and customer-management, accounting and payment services used by our team, including QuickBooks and KURV. We disclose information relevant to the service being provided. Their services may also be governed by their own privacy notices.
When company operations uses AI-assisted lease review, lease text may be sent to the configured AI provider, such as OpenAI or Anthropic, to suggest how clauses should be organized. This may include personal information contained in the source lease. Company staff review the suggested changes before releasing documents. Avoid placing unrelated personal information or payment-card details in uploaded source leases.
We may also disclose information when reasonably necessary to comply with law, respond to a valid legal request, protect people or accounts, resolve a dispute, or transfer the business as part of a transaction subject to appropriate confidentiality protections. We do not offer personal information for sale or operate a third-party behavioral-advertising program on this website.
Property address search
When you use address suggestions, the street address you type is sent to Google Maps to find matching US addresses. You can enter the address manually instead. We save the address you choose for your property; the suggestion list is not saved in your profile. We may also use US Census and OpenStreetMap services to locate the property and provide backup address search. Google's handling of search information is described in the Google Privacy Policy.
Cookies, local storage and analytics
Cookies and browser storage support sign-in, the preview access code, email-link sign-in, account preferences and the website's theme. Session storage also helps connect website activity and referral information to an inquiry. Unfinished inquiry and property-listing drafts are saved on your device for up to seven days for recovery; this does not submit them to our team. Draft recovery excludes homeowner payout details and payment-card forms. Blocking or clearing this storage can sign you out or interrupt those features.
We use Vercel Analytics and Speed Insights and, when enabled, Google Analytics to understand traffic and performance. These providers may process technical identifiers and website interactions under their own policies. Our inquiry measurements record activity such as property views and form starts; they do not need the contents of your messages, agreements or payment fields. Our own performance records group measurements by page type and device family, without storing private page URLs or account identifiers, and are scheduled for deletion after 35 days.
Links in our social posts may set a signed first-party cookie for up to 30 days to connect visits with subsequent lodging inquiries or first host signups in the same browser. It contains a post, platform and campaign reference, a random visit identifier and expiry, without contact or payment details. Social attribution honors Do Not Track and Global Privacy Control signals. Company administrators and recognized link previews are excluded from these counts.
You can manage cookies through your browser and use Google's Analytics opt-out tools. Our own performance measurements honor Do Not Track and Global Privacy Control signals. Other analytics providers may handle these signals differently. Contact us to request choices available under applicable law. Service emails about an active request or stay are separate from optional promotional communications.
Keeping information and protecting access
We retain information for the purposes described here, taking into account active requests and stays, accounting and tax records, signed agreements, disputes, fraud prevention and legal requirements. Retention varies by record type; closing an account does not automatically erase an executed agreement or a record we need to retain. We review deletion requests individually and explain relevant retention exceptions.
The app uses access restrictions and protected document storage, including encryption for completed payment authorization PDFs. These controls do not make any system risk-free or establish a payment-security certification. Do not send card details, passwords or sensitive orders in ordinary email, public profiles, listing descriptions or support messages.
Our team and service providers may process information in the United States and other locations where they operate. The protections and legal requirements in those locations may differ from those where you live.
Your choices and privacy requests
You can edit available profile information through your account, change review-sharing choices where offered, and disconnect Base Crashpads from your Google account through Google's account settings. Disconnecting Google does not itself delete Base Crashpads business records.
To request access, a copy, correction or deletion of your information, account closure, withdrawal of review sharing, or another applicable privacy choice, email basecrashpads@gmail.com with the subject Privacy request. Include your account email and a description of the request. Please do not include a full card number, security code or government identification document. We may need to verify your identity or authority before acting.
Depending on your location and the law applicable to our business, you may have additional rights, including rights concerning certain disclosures, restrictions or appeals. We will evaluate your request under applicable law, explain any exception and provide a way to ask us to reconsider a decision. We will not discriminate against you for exercising a legally protected privacy right.
Children's information
The website is intended for people arranging lodging or hosting, not for children under 13 to create accounts. An adult may provide limited household information when arranging a family stay. If you believe a child has provided personal information directly without appropriate permission, contact us so we can review and address it.
Policy updates
We will post changes on this page and update the effective date. For material changes affecting existing account information, we will provide an additional notice through the portal or the contact information on file when appropriate, and obtain any consent required by law.
Provider privacy resources
Learn more about the services used by the site and available account controls.