Privacy policy

Last updated October 28, 2026

DVC Topia is a marketplace where Disney Vacation Club owners rent their points to travelers. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It's part of our terms of service. DVC Topia is not affiliated with The Walt Disney Company or Disney Vacation Club.

Information we collect

Information you give us

• Account details: your email address, password (stored only as a secure hash), the display name shown to other members, and optional profile details such as phone number, photo, bio and home city.
• Owner details: your Disney Vacation Club membership and contract details (home resort, use year, point balances, purchase and financing details) and listings you publish. Your Disney membership ID is stored encrypted.
• Trip and booking details: trip requests, messages with other members, reservations, and the guest names and contact details Disney requires to make a reservation. Guest email, phone and address are stored encrypted.
• Reviews you write about other members.

Information from Facebook

If you choose "Continue with Facebook", Facebook shares your name, your Facebook user ID for our app, and your email address if you allow it. We use these only to create and sign in to your account. We don't receive your password, friends list or posts, we don't post to Facebook for you, and we don't keep your Facebook access token.

Information collected automatically

• Cookies: we use only the cookies needed to keep you signed in and to protect forms against forgery, plus a tz cookie holding your browser's time zone name (for example America/Chicago) so times are shown in your local time. It is not a location. We don't use advertising or tracking cookies.
• Technical data: like most websites, our servers and our network provider log IP addresses, browser type and the pages requested, for security and to keep the service running.

How we use your information

• To run your account and the marketplace: matching owners and renters, messaging, bookings and reviews.
• To make and verify Disney reservations for the stays you book.
• To process payments and payouts.
• To keep the service secure, prevent fraud, and enforce our rules, including Disney's limits on rentals.
• To send you messages about your account, trips and bookings.

We don't sell your personal information, and we don't use it for third-party advertising.

Who we share it with

• Other members: your display name, profile, listings and reviews are visible to other members. Your email address is never shown to other members.
• The other side of a booking: owners receive the guest details needed to make the reservation with Disney.
• Disney Vacation Club: guest details are passed to Disney when a reservation is made.
• Service providers who run parts of the service for us: Stripe (payments and identity verification), DigitalOcean (hosting and backups), and Cloudflare (network and security). They may use the information only to provide their services to us.
• When required by law, or to protect the rights, safety and property of our members or the public.

How long we keep it

• We keep account information while your account is open.
• Guest contact details are removed after the stay is over; we keep guest names and the reservation number for our booking records.
• Records of completed bookings and payments are kept as long as needed for accounting, tax and legal purposes.
• Database backups are kept for 14 days and then deleted.

Your choices

• You can update your profile details at any time.
• You can ask for a copy of your information, ask us to correct it, or ask us to delete your account. See how to delete your data.
• If you signed in with Facebook, you can remove DVC Topia from your Facebook settings under Settings & privacy → Settings → Apps and websites.

Security

All traffic to DVC Topia is encrypted with HTTPS. Sensitive details such as Disney membership IDs and guest contact information are encrypted in our database. No system is perfectly secure, but we work to protect your information and limit who can access it.

Children

DVC Topia accounts are for adults 18 and over. Children may be listed as guests on a reservation by the adult booking it.

Changes to this policy

If we make significant changes, we'll update the date at the top of this page and let members know by email or on the site.

Contact us

Questions about this policy or your information: email [email protected].