data and backups

All of it stays in the UK or the European Union, with providers that work under UK and EU data protection law.

nestr never holds card numbers. Cards are kept by Stripe, and identity documents are checked and kept by TrustID.

• Everything travels encrypted, and everything is stored encrypted.
• The most sensitive details, such as how to get into a home, are encrypted again by nestr before they are saved.
• Photos of homes and cats are private. Each is shown through a link that only works for the people on that booking and expires after a short time.
• Passwords are never stored, only a one-way scramble of them.
• Only nestr’s administrators can reach the systems, each with their own account.

• The database keeps a continuous history of every change, so it can be put back to how it was at any moment within its restore window. A copy can also be taken at any time and kept apart.
• Photos are stored by Cloudflare in several copies within the region, so losing one machine loses nothing.
• Every version of the app is kept. If a new version has a fault, the previous one is put back in about a minute.
• Payments and payouts are recorded by Stripe as well as by nestr, so money can always be reconciled from Stripe’s own records.

• Errors are reported to the people running nestr as they happen.
• If a provider has an outage, nestr waits for it to recover; none of these providers depends on a single building. If one is down for long, the app can be moved to another region from the latest backup.
• If data were lost or damaged, the database is restored to the last good moment and anything since is checked against Stripe and the emails nestr sent.
• If personal data were ever exposed, the people affected and the Information Commissioner’s Office are told within 72 hours, as UK GDPR requires.

Ask through Help in the app.