Effective Date: Upon publication
PRIVACY DESIGN. Identity documents and selfies are processed primarily by the identity-verification provider. TempusX’s intended product configuration is not to store raw identity-document or selfie images in its own application database.
This Privacy Policy explains how TempusX, LLC (“TempusX,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal data when you access or use the TempusX website, portals, applications, dashboards, messaging tools, verification workflows, subscriptions, and related services (collectively, the “Platform”).
This Policy applies to visitors, vacation-stay Owners, Travelers, subscribers, and people who contact support. It does not govern information collected directly by Owners, Travelers, resorts, homeowners’ associations, clubs, exchange programs, payment processors, identity-verification providers, or third-party websites under their own policies.
By using the Platform, you acknowledge this Policy. Where consent is required for a particular processing activity—such as certain sensitive-data, biometric, cookie, or marketing uses—we will request consent through the relevant flow.
legal name, display name, email address, phone number, mailing or billing address if provided, and internal Owner or Traveler ID;
username, password hash, account role, account status, email-verification status, and authentication or security information; and
support contact details and communication preferences.
resort group, property, program, unit, location, accommodation type, capacity, amenities, restrictions, photos, price, dates, availability, minimum stay, mandatory start day, and other Listing content;
contracts, membership or ownership records, bonus-use documents, reservation confirmations, guest certificates, assignment forms, and related review materials;
links between contracts and properties, review status, badge status, review dates, failure or follow-up reasons, and administrative notes; and
subscription type, Listing limits, renewal status, and payment metadata.
search destinations, dates, number of guests, unit preferences, travel month, flexible-date information, filters, favorites, saved Listings, and interaction history;
Inquiry dates, guest count, requested unit or resort, message content, response history, and related Listing details; and
self-entered stay or booking-history details used as a personal dashboard record.
messages exchanged through the Platform and message metadata, including sender, recipient, timestamps, and related Listing or Inquiry;
report reason, free-form report details, reported conversation, evidence, review status, administrative actions, and resolution notes; and
emails, contact-form submissions, support requests, complaint or dispute materials, and call or meeting notes you provide.
When identity verification is required, the third-party provider may collect a government identification document, document images, selfie or live-capture images, name, date of birth, address, document number, document type and country, device and network information, verification signals, and—where used for identity matching—biometric identifiers or biometric information as described in the provider’s notice.
TempusX may receive or maintain a verification-session identifier, status, verification date, expiration or renewal status, document type or country, match or risk result, failure reason, and limited metadata needed for account administration, support, fraud prevention, and compliance.
plan, price, billing period, coupon or promotion, invoice, transaction, renewal, cancellation, delinquency, refund, and payment status;
limited payment-method details from the processor, such as brand, last four digits, and expiration month/year; and
billing address and tax information when required for the transaction.
TempusX does not store full payment-card numbers or bank-account credentials. Stay payments between Owners and Travelers are not processed by TempusX.
IP address, browser, operating system, device identifiers, language, approximate location inferred from IP, referring URL, page and feature activity, clickstream, timestamps, and error or performance logs;
authentication, security, fraud, and session data; and
cookie, pixel, tag, analytics, and advertising identifiers and preferences.
We collect personal data:
directly from you when you register, verify, subscribe, upload documents, publish a Listing, search, save, message, report, or contact support;
from other Platform users when they communicate with, report, or enter information about you;
from service providers, including identity-verification, payment, hosting, analytics, security, email, and support vendors;
from resorts, clubs, associations, vacation programs, official websites, and other public or official sources used to create discovery content or assess submitted information; and
automatically from your browser, device, cookies, and Platform activity.
We use personal data to:
create, authenticate, secure, and administer accounts and separate Owner/Traveler profiles;
verify email, support identity verification, review Owner documents, issue or revoke limited Verification Statuses, and prevent fraud;
publish and manage Listings, resort pages, availability, photos, search, filters, favorites, recommendations, and dashboards;
transmit Inquiries and facilitate communications between Owners and Travelers;
process subscriptions and Platform fees, administer renewals and cancellations, and maintain transaction records;
provide customer support, respond to requests, troubleshoot, investigate reports, facilitate non-binding administrative assistance, and enforce Platform terms;
operate, maintain, analyze, test, improve, and secure the Platform;
send service, security, account, billing, verification, Inquiry, and support communications;
send marketing where permitted and honor communication preferences;
comply with law, legal process, tax/accounting requirements, and protect rights, safety, property, and the integrity of the Platform; and
create aggregated or deidentified information for analytics and business planning, subject to measures designed to prevent re-identification.
TempusX does not use personal data to make solely automated decisions that produce legal or similarly significant effects concerning users.
Identity verification is performed primarily by Stripe Identity or another designated provider. The verification interface is provided by or integrated with that provider, and the provider processes verification data under its own terms and privacy notice. Where biometric identifiers or other sensitive data are processed, the verification flow should present the applicable notice and consent request.
TempusX’s intended product configuration and internal policy is not to store raw government-ID images or selfie images in the TempusX application database. TempusX generally receives status results and limited metadata described in Section 2.5. Depending on provider configuration, permissions, support needs, fraud concerns, or legal obligations, specifically authorized personnel may have limited provider-side access to additional verification results. TempusX does not use identity images or biometric information for advertising or unrelated purposes.
If verification fails, the legal name does not match an Owner document, or information changes, we may receive a failure signal, request additional supporting information, direct you to the provider, or initiate a new verification session. Additional documents submitted directly to TempusX are handled under this Policy and should contain only information needed to resolve the issue.
A request to delete Platform data may require TempusX to redact or close the verification session through the provider’s tools. The provider may retain certain data under its own legal obligations or policies, and you may need to contact the provider directly to request removal from the provider’s systems. We will provide reasonable instructions when applicable.
Owner contracts and related use-right documents are reviewed only for the limited purposes described in the Terms. They are not public. Access is limited to authorized personnel and service providers with a business need. Documents may be retained while the account, verification, Listing, dispute, or legal need remains active and then deleted, redacted, anonymized, or archived according to our retention criteria.
Owners should remove or redact unnecessary Social Security numbers, full financial-account information, unrelated signatures, personal information of non-users, and other sensitive data before upload. We may reject, redact, or delete documents containing unnecessary sensitive information.
Published Listing content and source-derived resort information may be publicly visible.
A display name, user identifier, profile information, and Verification Status may be visible according to the applicable feature and plan. A legal name may be used internally even when a different display name appears publicly.
Inquiry details and messages are visible to the sender and recipient and may be visible to authorized TempusX personnel when needed for support, reporting, fraud prevention, enforcement, or legal compliance.
Self-entered stay-history information is intended for the Traveler dashboard but may be processed by authorized personnel or vendors for support, security, or Platform operations.
Owners and Travelers are independent users. TempusX does not control how a recipient uses information lawfully received outside the Platform.
We disclose personal data to vendors that provide identity verification, payment processing, cloud hosting, database, security, analytics, email, messaging, customer support, document review support, and professional services. They may process data only for authorized purposes and under applicable contractual and legal obligations.
We disclose Listing, profile, Inquiry, message, and status information to Owners and Travelers as needed to provide the requested Platform features.
We may disclose information when we reasonably believe it is necessary to comply with law or legal process; respond to lawful government requests; investigate fraud, security incidents, reports, or policy violations; protect rights, safety, or property; enforce agreements; establish or defend legal claims; or prevent harm.
Information may be disclosed or transferred in connection with a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, due diligence, or similar transaction, subject to appropriate confidentiality and legal requirements.
We may disclose information when you direct us to do so or provide consent, such as when you submit an Inquiry, ask us to contact a resort or provider, or request a support action.
TempusX does not sell personal data for money. We may use analytics, advertising, social-media, or measurement technologies. Depending on the jurisdiction and the technology used, certain disclosures of identifiers or activity data for cross-context or targeted advertising may be treated as a “sale,” “sharing,” or targeted advertising even when no money is exchanged.
Where applicable law provides an opt-out right, you may use the cookie or privacy controls presented on the Platform, where available, or contact service@tempusx.net. Where required and technically applicable, we will honor recognized opt-out preference signals. TempusX does not use profiling to make decisions that produce legal or similarly significant effects.
We and our service providers may use cookies, pixels, tags, local storage, and similar technologies for authentication, security, preferences, functionality, analytics, performance, marketing, and measurement. Some cookies are necessary for the Platform; others may be optional depending on your location and settings.
You may manage cookies through Platform controls where available and through browser settings. Disabling necessary cookies may prevent account or Platform functions. Available cookie and privacy controls may vary by location, device, browser, vendor, and the technologies then in use.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, considering the nature and sensitivity of the data, Platform and account needs, verification and subscription status, user expectations, security, fraud prevention, dispute and evidence needs, limitation periods, and legal, tax, accounting, and regulatory obligations.
Account and profile data may be retained while the account is active and for a reasonable period after closure.
Listings, Inquiries, messages, reports, and administrative records may be retained for operations, safety, fraud prevention, dispute handling, and enforcement.
Owner contracts and reservation documents may be retained while linked to an active review or Listing and for a reasonable legal or dispute period afterward.
Subscription and transaction records may be retained for accounting, tax, chargeback, and legal requirements.
Verification status and limited metadata may be retained to document eligibility, prevent fraud, and respond to legal or user requests.
Raw identity documents and selfies are intended to remain with the verification provider rather than the TempusX application database, subject to Section 5.
Backups may retain information for a limited period until overwritten or deleted under ordinary backup cycles.
We may delete, redact, aggregate, deidentify, or anonymize information when it is no longer needed. Deidentified data may be retained and used if we maintain it without attempting to re-identify individuals except as permitted by law.
We use reasonable administrative, technical, and physical safeguards designed to protect personal data, including access controls, authentication, vendor management, logging, encryption where appropriate, and procedures for security events. No system is completely secure, and we cannot guarantee absolute security. Users are responsible for protecting credentials and should notify us promptly of suspected compromise.
Depending on your jurisdiction and our legal obligations, you may have the right to:
confirm whether we process your personal data and access it;
correct inaccurate personal data;
delete personal data provided by or obtained about you, subject to exceptions;
obtain a portable copy of personal data you previously provided, where technically feasible;
opt out of sale, targeted advertising, or profiling that produces legal or similarly significant effects;
withdraw consent where processing relies on consent;
opt out of marketing communications; and
appeal a decision denying a privacy request where applicable.
Submit a request or appeal to service@tempusx.net with the subject “Privacy Request” or “Privacy Appeal.” Describe the right you wish to exercise and the account or email involved. We may authenticate the request using commercially reasonable information and may request additional information. Authorized agents may be required to provide proof of authority and the user’s identity.
For authenticated Texas requests to which the Texas Data Privacy and Security Act applies, we will respond without undue delay and generally no later than 45 days after receipt, subject to one additional 45-day extension when reasonably necessary with notice. If we decline a request, we will provide the reason and appeal instructions. We will respond to an appeal within the legally required period, which is generally 60 days under that Act. If an appeal is denied, we will provide information about contacting the Texas Attorney General.
We will not unlawfully discriminate against you for exercising a privacy right. Some data cannot be deleted or changed when it is needed to provide a requested service, protect security, prevent fraud, comply with law, preserve legal claims, or meet another applicable exception.
You may opt out of marketing emails by using the unsubscribe link or contacting us. You may still receive essential account, verification, billing, security, Inquiry, support, and legal communications. Push, SMS, or similar communications will be used only as implemented and permitted by law, with applicable consent and opt-out controls.
The Platform is not intended for anyone under eighteen (18), and users must be at least eighteen to create an account. We do not knowingly collect personal data from children. If you believe a minor provided personal data, contact service@tempusx.net so we can investigate and take appropriate action.
TempusX is operated from the United States. If you use the Platform from another country, your information may be transferred to, stored in, and processed in the United States and other locations where our service providers operate. Those locations may have different data-protection laws. Additional notices or consent may be provided where required.
The Platform may link to or integrate with third-party sites and services. Their privacy practices are governed by their own notices. Review those notices before providing information directly to a third party. TempusX is not responsible for third-party privacy, security, content, or decisions.
We may update this Policy to reflect product, legal, vendor, or operational changes. We will post the updated Policy and revise the effective date. For material changes, we may provide additional notice by email or in-product message. Where required, we will request consent before applying a new use to previously collected data.
Questions, requests, complaints, or appeals concerning privacy may be sent to:
TempusX, LLC
Email: service@tempusx.net