Boody

Privacy policy

Boody handles sensitive information: identity documents, addresses, payment details and private conversations. This page explains what we collect and why.

Last updated 14 August 2026

Draft

This document is a working draft. Company details and legally binding wording still need to be confirmed before launch.

Who is responsible

The controller of your personal data is Boody, registered in the Netherlands with Chamber of Commerce (KvK) number 69591520, based at Parkweg 57a, 9724 AD Groningen, the Netherlands. For privacy questions and data requests, contact us.

What we collect

  • Account data: email address, password hash, first name, date of birth.
  • Profile data: photos, description, languages, activities, city, rates and availability.
  • Verification data (hosts): ID document, selfie, legal name and private address.
  • Requests and messages: the plans you propose and the conversations you have.
  • Payment data: amounts, status and payout details, processed by Stripe. We never store full card numbers.
  • Technical data: IP address, device and browser information, and error logs.

Why we use it

To run your account and profile, to match requests, to verify age and identity, to process payments and payouts, to keep the platform safe, and to comply with legal obligations such as tax and anti-fraud rules.

Who we share it with

Service providers acting on our instructions: our hosting and database provider, Stripe for payments and payouts, and our email delivery provider. The person you meet only sees your public profile and the messages you send them. We do not sell personal data.

How long we keep it

  • Account and profile data: while your account exists, deleted within 30 days after you close it.
  • Verification documents (ID and selfie): deleted within 90 days of the review; we keep only the outcome and the date.
  • Messages and requests: 12 months after the meeting, so disputes and reports can still be investigated.
  • Payment and invoice records: 7 years, as Dutch tax law requires.
  • Technical and error logs: 90 days.

Your rights

You can access, correct, export or delete your data, object to processing and withdraw consent. You can delete your account from your account, and you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

See the cookie policy.