The primary comments and concerns that we’ve received are about our license to use member data. After discussing this with many community members, it’s clear that it’s necessary to provide some more clarity on what the license does, how it’s limited, and how we can and can’t use data.
Our license provides us:
1. The right to use content for our services
2. The ability to retain data for safety purposes
Although the wording of our license is not uncommon, it differs from some others. The reason for this is that, being a unique type of community, we have different needs from most other websites. For example, it is our policy that members can only have one profile, ever, to be sure that people stand by the reputation they build. When a repeat profile is reported to us, we are only able to verify that information by checking against deleted data. Having the broad member license allows us to do this to support the integrity of our reputation system. This isn’t a need that many websites have.
3. A broad platform to innovate
Another unique aspect of CouchSurfing, which anyone who’s been around for a bit knows all too well, is that we have a backlog of years’ worth of great ideas from the community that we have yet to implement. We’re expanding our team, moving faster, and want to get new things out there. Our plan changes all the time as we assess the community’s interests and our own capabilities. We want to be able to do something as big as rideshare or as small as a hosting calendar — whatever would be the best thing at the time — without needing to go through a new legal process each time.
Our privacy policies, and the legal system they operate within, limit our use of your information to protect your privacy:
Participation in the EU-US Safe Harbor Privacy Principles
We have now also finished the process required to participate in the EU-US Safe Harbor Privacy Principles. This optional step holds us legally responsible to the guiding principles of the European Data Protection Directive. Although it would be impossible for us to take similar steps in every country where we have members, the EU is well known for having very well-developed privacy law. We are applying these principles across the board, even to members in other regions of the world.
Your data is not for sale
As a result of these different layers of compliance and interaction between our policies, it is easy to reach the conclusion that we can use individual data far more freely than we actually a can. A few clarifications on what is and is not legally possible:
- We can’t use your individual data for our own or others’ promotional/marketing without giving you the tools and options to control that. For example, at some points we may want to send you marketing emails. And in the past, we have featured members’ photos on the homepage. For uses like that, which may be considered promotional, we will give you the tools to control that. For any use outside of our services (such as if we decided to advertise CouchSurfing on other websites) we would need your express consent.
- We can transfer your data to third parties who help us provide our services. For example, if you get verified, we transfer your address to the company that sends our verification postcards. Or if you buy a CouchSurfing T-shirt, you do that using our gear shop partner. When this happens, these third parties have signed agreements to safeguard your data, and not to use it for any other purpose or share it with anyone else.
- We can share anonymized, amalgamated data with third parties. For example, we’ve worked in the past with researchers who investigated the development of trust amongst strangers; for their work, we shared anonymized information about member behavior.
Designed for transparency
These policies have been in the works for over six months; or, around the time we began developing our mobile apps. The new platforms meant that an update was necessary. Our legal team, working with many advisors, took the opportunity to give both policies a full and detailed evaluation to be sure that we included everything that we should.
It is crucial that these policies be as detailed as possible so that individuals can choose their own comfort level in regards to their online behavior.
At the same time, we recognize that it’s a lot of information to go over and digest. If you have questions, please feel free to contact us.