Privacy notice
Version: 2026-10-23
Early-access account policies. Business contact details are awaiting confirmation. Accounts and private collections are available; reservations and payments are not open.
Who operates this service
Mallory Street Marketplace LLC operates Mallory Street. This notice covers Mallory Street browsing, accounts and private collections. GuestProfile.Center is a separate platform with a separate account and its own policies. Following a link there does not automatically connect accounts.
Information we collect
We receive your email address, first and last name, preferred name, optional profile photo, optional contact phone number and company, guest/professional preference, professional organization details, role, housing specialties, website and work contacts, account verification and policy acceptance records, and the collection information you enter: trip or client references, dates, destinations, budgets, requirements, saved homes and notes. Our identity service processes passwords and verification codes to authenticate you. Hosting and security services may process IP addresses, device and browser information, request times, and error or access logs. Do not put identification documents, payment information, health information, or sensitive client case files in collection notes.
How we use information
We use this information to create and secure your account, send verification and recovery messages, store and display your private plans, provide support, diagnose problems, prevent misuse, and meet applicable legal obligations. Collection requirements are used when you choose to search with them. Email verification confirms control of an email address; it is not identity or background verification.
Who can receive information
Amazon Web Services provides hosting, identity, database and email delivery services. Authorized service operators and providers may access information as needed to run, secure and support the service. The site also requests fonts from Google, which receives connection information when those fonts load. Development and error-reporting tools may receive technical diagnostics. We may disclose information when legally required, to protect rights and safety, or as part of a business transfer subject to applicable protections. Collections are not public or shared with other account holders. We do not automatically send collection contents to GuestProfile.Center.
Cookies and browser storage
An essential, HttpOnly session cookie keeps you signed in for up to 30 days, unless you sign out, reset your password, or the session is revoked. The browser may also temporarily store the home you intended to save and your search criteria so you can continue after signing in. Blocking cookies prevents sign-in. You can clear browser storage through browser settings. This account release does not use an advertising-cookie consent as a condition of creating an account.
ID document checks
When you complete the ID document requirement, we collect your legal name, issuing country, document type, government photo ID images, consent and document-check results. AWS stores this information privately with encryption and access controls. Each image is sent separately to OpenAI to check its type and readability; no automated face matching, identity probability, document-authenticity or liveness assessment is performed. A positive document-type and readability result completes the account’s ID document requirement. This does not establish document authenticity or ownership. We do not collect a separate selfie. We currently have no automatic expiration for submissions: they remain until removed by authorized staff. Contact us to request access, correction or deletion of your ID documents; minimal consent and security audit records remain. OpenAI may separately retain API inputs for abuse monitoring, ordinarily up to 30 days, subject to its applicable policies and legal exceptions. Deleting stored documents does not instantly erase provider security records or database backups. A formal retention schedule is not yet established.
Keeping and protecting information
Account and collection information remains while your account is active unless you delete a collection or request deletion. We use access controls, encrypted connections, and managed encrypted storage. No system is completely secure. Deleted information can remain in restricted backups until their retention period ends; security or legal records may need to be retained for the relevant purpose. We do not promise immediate removal from every backup.
Your choices and requests
You can edit your profile, replace or remove your profile photo, verify a new email address, change your password, update or delete plans, remove saved homes, and sign out. Contact privacy@mallorystreet.com to request access, correction, export or deletion of account information, or to ask about your privacy rights. We may verify control of your account before acting. Rights and exceptions depend on applicable law; you can ask us to reconsider a declined request. Self-service account deletion is not available yet. Business contact details are being finalized.
Children and future features
Accounts are intended for adults 18 and older. We do not intentionally invite children to create accounts. If a child’s information was submitted, contact us so we can investigate. Booking, payments, screening, social sign-in and collection sharing are not included in this release; additional notices will explain their data use before they launch.
Changes and contact
We will date changes to this notice and provide additional notice when appropriate. Privacy contact: privacy@mallorystreet.com. Support: help@mallorystreet.com. Mailing address: Pending owner confirmation.