This policy explains what data we collect, why we collect it, how it is stored, and your rights under the Protection of Personal Information Act (POPIA — South Africa) and the General Data Protection Regulation (GDPR — European Union).
tripspace.global is operated by Forge Vertical (www.forgevertical.com), Cape Town, South Africa. We are the responsible party (POPIA) and data controller (GDPR) for personal information collected through this platform.
Name, email address and role (host/traveller). Purpose: to create and authenticate your account. Legal basis: contractual necessity.
Business name, contact details, bank name, account number, branch code, account type, SWIFT code. Purpose: to process payouts and generate invoices. Banking details are stored exclusively in Google Cloud Secret Manager — an enterprise-grade secrets vault. They are never stored in plain text in our database. Account numbers are masked in the user interface (displayed as XXXX) and only revealed on official invoices generated by you.
Property details, photos, pricing, availability. Purpose: to display your listing to travellers. This data is publicly visible.
Guest name, email, phone, travel dates, payment method. Purpose: to process bookings and send confirmations. Stored in Firestore, encrypted at rest.
We do not store card numbers or PayPal credentials. Payments are processed by PayFast and PayPal, which are PCI-DSS compliant. We receive a transaction confirmation reference only.
GPS coordinates of your registered device. This data is only collected when you explicitly activate DeviceGuard. No location data is collected passively or in the background without your action. Location data is stored in your private Firestore document, visible only to you when logged in. It is not shared with third parties. You may delete your DeviceGuard data at any time from the DeviceGuard settings.
Photos of your rental vehicle's license disc and any visible damage. Purpose: to generate an AI-powered repair estimate. Photos are processed by Google Gemini AI (Google Cloud) to extract vehicle details and analyse damage. Results are stored in your private Firestore document. Photos are not used for any other purpose and are not shared with third parties or rental companies without your consent.
Browser hardware signals (screen resolution, GPU renderer, timezone, hardware concurrency). Purpose: to generate a unique Device ID to ensure only your registered phone responds to pings. This fingerprint is stored securely and is visible only to you.
SpaceChat is the internal messaging system within tripspace.global. Message history is stored on your device only (IndexedDB — your browser's local storage). tripspace.global does not retain your chat history on its servers beyond what is temporarily needed to deliver messages in real time.
The SpaceChat backup feature allows you to download your message history as a file and save it to your own Google Drive or any location you choose. tripspace.global does not upload, store or have access to your backup files. Backups are downloaded directly to your device. Media files (images, voice notes) are stored locally on your device and are not included in text backups.
Voice notes are recorded locally using your device microphone, stored in your browser's IndexedDB, and transmitted only to the intended recipient's device. They are not stored on tripspace.global servers.
By using SpaceChat you consent to microphone access for voice notes (when you initiate recording) and local storage of your message history on your device.
tripspace.global includes a flight search feature powered by Skyscanner. When you use this feature, you are redirected to Skyscanner's website to view results and complete any booking. tripspace.global does not collect, store or process any flight search data or passenger information. Data entered into the flight search (airport codes, travel dates, passenger count) is sent directly to Skyscanner and governed by Skyscanner's Privacy Policy. Any booking, payment or personal data entered on Skyscanner is the sole responsibility of Skyscanner. tripspace.global is not a party to any flight booking transaction.
Website URL, Instagram, Facebook, X (Twitter) and YouTube links entered in the Host Profile. Purpose: to support the host's online presence and platform discoverability. These links are never displayed to travellers on public listings.
To understand how visitors find and use tripspace.global — and to measure the effectiveness of our marketing — we collect anonymised, first-party analytics. When you visit the site, we record the page visited, the referring source (for example, a search engine or social platform), your approximate country (derived from network-level location, never a precise address), your browser language, and general engagement signals such as whether genuine interaction occurred. This helps us distinguish real human visitors from automated bots and improve the platform for the regions and audiences that use it most.
We do not collect or store your IP address, name, email, or any personally identifiable information through analytics. This data is first-party (collected by us, for us), is never sold or shared with advertisers, and is used solely to operate and improve tripspace.global. We also use Cloudflare edge analytics and Firebase performance monitoring, both anonymised.
We do not sell personal data. We do not share personal data with advertisers. Data is shared only with:
Under POPIA and GDPR you have the right to:
To exercise any right, email [email protected] with subject "Data Request".
Account data is retained for the duration of your account plus 14 days after deletion request. Booking records are retained for 7 years for tax and legal compliance. DeviceGuard location data is deleted immediately upon deactivation or account deletion.
We use minimal cookies and browser storage: a session authentication token (essential), a session identifier used to count each visit once for our anonymised first-party analytics, and anonymised edge analytics (Cloudflare). We do not use advertising cookies or third-party tracking pixels, and we do not track you across other websites. You can manage cookies via the "Manage cookies" link in the footer of tripspaceglobal.com.
← Back to tripspace.global