Privacy Policy

NicheShift is a two-sided marketplace for off-hours commercial space rentals. To operate that marketplace, we collect and process information about renters, hosts, and visitors. We try to collect the minimum we need to run the service responsibly, we are clear about who we share it with, and we give you tools to access, correct, or delete your data.

We are headquartered in Boise, Idaho. The Platform is currently offered only in the United States.

You give us

• Account information: name, email, password (hashed by Firebase Authentication), phone number, business name and type (for hosts), and your profile photo if you upload one.
• Host information: the address, photos, and descriptive details of each space you list; the legal / business identity Stripe collects during Connect onboarding (name, address, government ID, taxpayer information); bank account details, which Stripe handles directly and which NicheShift never sees in raw form.
• Renter information: the spaces you book, attendee count, intended use, and the payment method you attach at checkout (handled by Stripe; NicheShift never stores card numbers).
• Communications: the messages you send to other users through the in-platform messaging system, the content of support emails, and your responses to feedback prompts.
• Reviews: the ratings and comments you publish about other users or spaces.

We collect automatically

• Device and log data: IP address, browser type, operating system, referring URLs, pages viewed, timestamps, and crash logs.
• Approximate location: derived from IP and, with your permission, more precise location from the browser's geolocation API to power location-based search.
• Cookies and similar technologies: see the Cookies and tracking section below.

We receive from third parties

• Stripe — payment status, payout status, identity-verification status, dispute and chargeback events.
• Thimble Insurance Services — quote and policy bind details for bookings where the renter chooses Thimble coverage.
• Identity providers — when you sign in with Google, Google provides your name, email, and avatar URL.
• Geocoding providers — we use third-party geocoding to convert addresses into coordinates for map display and proximity search.

We use the information we collect to:

• Operate the Platform — create your account, render listings, run search, route bookings, send notifications, and let you message other users.
• Process payments — via Stripe, with our platform fee taken on the host side and the remainder transferred to the host's connected account.
• Facilitate insurance — passing booking details to Thimble at the renter's request.
• Communicate with you — transactional emails (booking confirmations, reminders, refunds), product updates, and support correspondence.
• Prevent fraud and abuse — detect suspicious behavior, enforce these Terms and other NicheShift Agreements, and respond to disputes.
• Improve the product — aggregate analytics about usage, performance, and conversion funnels.
• Comply with law — tax reporting (Stripe issues 1099-K forms to U.S. hosts who meet the threshold), legal process, and regulatory obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act.

• Between hosts and renters. When a booking is requested or confirmed, we share the parties' display names, profile photos, in-platform messages, and booking details with each other. We do not share contact details (phone, email) directly between parties.
• Service providers. We share information with vendors who help us operate the Platform, under written confidentiality and use-limitation obligations. Current major providers include Google Cloud / Firebase (hosting, data storage, authentication), Stripe (payments and payouts), Thimble (insurance), Resend (transactional email), Sentry (error monitoring), and Cloudflare or OpenStreetMap (geocoding and map tiles).
• Legal and safety. We share information when required by law, subpoena, or court order; to enforce our Terms or other agreements; to protect the rights, property, or safety of NicheShift, our users, or the public; or to investigate fraud and abuse.
• Corporate transactions. If NicheShift is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality.

We use cookies and similar technologies to keep you signed in (the __session cookie issued by Firebase Authentication after sign-in), remember small UI preferences, and collect aggregated analytics about how the Platform is used. We do not run cross-site advertising trackers.

You can disable cookies in your browser settings; some parts of the Platform (signed-in flows, the booking checkout) will not work without session cookies.

• Access and correction. You can view and edit most of your account information from your profile page. For data you can't see directly, request a copy at support@nicheshift.com.
• Deletion. You can request account deletion by contacting support. Some records (booking history, payment receipts, audit logs) are retained as required for tax, legal, or accounting purposes.
• Marketing emails. Every marketing email includes an unsubscribe link. Transactional emails (confirmations, refunds, payout failures) are required for the service and cannot be opted out of while your account is active.
• State-specific rights. Residents of certain U.S. states (including California, Colorado, Virginia, Connecticut, Utah) have rights of access, deletion, correction, and portability under state privacy laws. To exercise these, contact support@nicheshift.com with the state you reside in and the right you wish to exercise.
• Do Not Track. We do not respond to browser Do-Not-Track signals because there is no consistent industry interpretation; we follow the choices you make directly through your account and browser cookie settings.

We retain personal information for as long as your account is active, plus the period required to satisfy tax, accounting, dispute-resolution, and legal-compliance obligations (generally seven years for financial records, shorter or longer for other categories). When data is no longer needed, we delete or de-identify it on a rolling schedule.

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, access control on production systems, audit logging of administrative actions, and least-privilege rules in Firestore. No system is perfectly secure; we work to detect, contain, and disclose incidents promptly when they occur.

The Platform is not directed to children under the age of eighteen (18). We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact support@nicheshift.com and we will delete it.

The Platform is currently offered in the United States only, and is operated from the United States. If you are accessing the Platform from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we do, we will post the updated version with a revised effective date. Material changes will be communicated by email to your registered address and via an in-product banner.

NicheShift, Inc.
Boise, Idaho, United States
Privacy: support@nicheshift.com
General: support@nicheshift.com