Data Report Card · Vrbo
Vrbo Data Report Card
C
6/12 Policy grade · Vacation rentals · Expedia Group
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Vrbo's published policy; none has been tested (run by us) yet.
1Accessstated
You can access, amend, or inquire about your personal data by logging into your account or contacting Vrbo / Expedia via Contact Us or privacy@expedia.com, but there is no self-serve one-click export, so access is scored at the partial level.
Vrbo — Request information about your personal data · accessed Jun 2026 ↗1Portabilitystated
Personal-data requests are fulfilled through Expedia's privacy channel; no structured machine-readable self-serve export is documented, so portability is scored at the single-format level.
Vrbo — Privacy Statement · accessed Jun 2026 ↗Connects to apps: No. Vrbo / Expedia offers no consumer-grantable OAuth API for an agent to fetch your own personal account data; the self-data path is the account request or privacy@expedia.com email, so agent access is scored at the lowest level. Vrbo — Request information about your personal data (manual request, no consumer API) · accessed Jun 2026 ↗
1Frictionstated
Rights are exercised through account settings plus a Contact Us / privacy@expedia.com request rather than a dedicated self-serve portal, placing friction at the moderate level.
Vrbo — Request information about your personal data · accessed Jun 2026 ↗1Deletionstated
You can request deletion via your account or privacy@expedia.com, but Expedia may retain supplier data and share data with tax authorities after account closure, so deletion is scored at the partial level.
Vrbo — Privacy Statement (retention) · accessed Jun 2026 ↗1Sells / sharesstated
Vrbo provides a "Do Not Sell My Personal Information" opt-out in its footer, indicating it shares or sells personal data for advertising under the CCPA with an opt-out available, so sharing is scored at the partial level.
Vrbo — Privacy Statement (Do Not Sell opt-out) · accessed Jun 2026 ↗1Trains AIstated
Vrbo's / Expedia's privacy statement makes no affirmative commitment against using personal data to train AI or machine-learning models; absent a clear no-training pledge, model-training use is scored conservatively at the partial level.
Vrbo — Privacy Statement (silent on AI training) · accessed Jun 2026 ↗Reviewed Jun 2026 from Vrbo's Privacy Statement (Expedia Group) and Vrbo Help data-request pages. All cells "stated", not tested. Vrbo routes data rights through Expedia Group: access / amend / delete via the account or a Contact Us / privacy@expedia.com request (not a self-serve export portal), and it operates a "Do Not Sell My Personal Information" opt-out, indicating it shares / sells data for advertising under the CCPA. There is no consumer OAuth data API. Supplier and tax-authority data may be retained after account closure.
Events
Breaches, policy changes, and export-format changes we’ve recorded at Vrbo — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
No events on record for Vrbo.
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
No changes since this grade was first published in Jun 2026.
How to request your data from Vrbo
- Go to https://www.vrbo.com/legal/privacy — Vrbo's data-request entry point.
- Account settings or Contact Us for access / amend / delete; privacy@expedia.com; Do Not Sell My Personal Information opt-out in footer.
- Expected wait: access / deletion via account or privacy@expedia.com; supplier / tax-authority retention applies; no consumer data API — Vrbo's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact Vrbo / Expedia Group — Privacy requests: mailto:privacy@expedia.com.
These steps reflect Vrbo's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.