How Packhood keeps your space, your money and your data safe
Packhood is a peer-to-peer marketplace, but the safety bar is set higher than commercial self-storage. Every host is ID-verified through Stripe Connect's KYC. Every booking is held by Stripe until the host accepts. Every booking is covered by the Packhood Host Guarantee — up to €300 (£300 in the UK) per booking, aggregate across all claims. Your personal data is encrypted in transit and at rest, GDPR-compliant by design, and exportable or deletable at any time.
The 9 layers of safety on every Packhood booking
1. ID-verified hosts (Stripe Connect KYC)
Every host is required to complete Stripe Connect identity verification before their first listing goes live. Stripe checks government-issued ID against the bank account that will receive payouts. Hosts who can't verify can't host.
2. Manual moderation of every new listing
Listings are reviewed by the Packhood team before publication. Suspect addresses, mismatched photos, or unrealistic pricing trigger a hold. Flagged listings post-publication are reviewed within 24 hours.
3. Stripe-isolated payments
Renters' cards are charged via Stripe with manual capture — the card is only charged when the host accepts the booking. Hosts receive 95% of the booking value, paid out within 24 hours of move-in. Packhood never holds card data; Stripe is PCI-DSS Level 1 certified.
4. €300 / £300 Host Guarantee per booking
Every booking includes the Packhood Host Guarantee, aggregate up to €300 in the EU and £300 in the UK across all claims for that booking. It covers renter-caused damage to the host's space and host-caused damage to the renter's belongings, mediated by the Packhood disputes team. Claims open from the dashboard within 14 days of move-out.
5. End-to-end encrypted in-app messaging
All renter–host conversations are routed through Packhood's encrypted messaging. Phone numbers and email addresses are masked until a booking is accepted, so contact details aren't leaked through cancelled enquiries.
6. GDPR-compliant data handling
Packhood is GDPR-compliant by design. Personal data is encrypted in transit (TLS 1.3) and at rest (AES-256). Data is shared with the host only to the minimum extent needed to fulfil the booking — typically the access window and the address. Renters and hosts can export or delete their account at any time. Full privacy policy.
7. Two-factor authentication (optional)
Both renters and hosts can enable 2FA via authenticator apps. Enforced on accounts handling payouts above €1,000/month.
8. Reviews you can trust
Only completed bookings can leave a review — verified by Stripe payment status. Hosts cannot delete renter reviews; the Packhood team only removes reviews that breach Community Standards (defamation, personal data, spam) and publishes the moderation log internally.
9. 24-hour human dispute response
The Packhood disputes team responds in under 24 hours, weekdays. Most disputes resolve in 5 business days. Cases that involve a Host Guarantee payout settle once both parties have submitted evidence and the team has confirmed liability.
Your data on Packhood
- Encryption: TLS 1.3 in transit, AES-256 at rest, PCI-DSS Level 1 (Stripe).
- Data residency: EU / UK / NL data is hosted within the European Economic Area.
- Retention: Active accounts retained until deletion request; finished bookings retained for 7 years (statutory tax/dispute period).
- Sharing: Never sold. Shared only with payment processors, identity-verification partners, and law enforcement under valid legal process.
- Subject rights: Export, rectify or delete from your dashboard at any time. Requests resolve within 30 days.
Reporting a security issue
If you believe a listing, an account or a part of the platform is unsafe, contact security@packhood.com. Verified researchers can request an in-scope coordinated-disclosure window. Critical issues are triaged within 4 hours, weekdays.
Contact security team