Design a privacy-safe personalization system for Business Travel at global scale

Problem Statement Description

Product context: Airbnb is a travel marketplace connecting guests and hosts; its products include stays, experiences, host tools, guest booking, trust and safety, payments, and reviews.

Airbnb wants to improve its Business Travel experience for global travelers who need reliable, work-appropriate stays while maintaining strong privacy protections. The system should personalize discovery, ranking, recommendations, and trip-related experiences without exposing sensitive employer, traveler, location, or behavioral data in ways that could violate user trust, company policy, or regional regulations.

Consider the end-to-end workflow for a business traveler: arriving through a company travel program or individual work trip, searching across markets, evaluating listings and Superhosts, checking work-friendly amenities, booking within policy, coordinating with hosts, and completing the stay. The experience must also account for hosts who want to attract qualified business travelers without receiving unnecessary personal or corporate information.

This is a Technical PM design question. Focus on defining product and technical requirements for a privacy-safe personalization platform at Airbnb scale, including data inputs, system boundaries, APIs, model/data usage constraints, consent, reliability, security, rollout, and measurable product trade-offs.

The experience should consider:

- User requirements for business travelers, travel managers, hosts, and internal operations teams across different countries and policy environments.

- What personalization should support, such as search ranking, listing recommendations, amenity relevance, destination context, host matching, and trip continuity.

- Privacy and security constraints around employer affiliation, trip purpose, traveler identity, location history, payment data, messaging, and cross-device/session behavior.

- Data architecture, APIs, consent flows, access controls, retention rules, anonymization or aggregation needs, and auditability.

- Reliability and latency expectations for global search and booking flows, including graceful degradation if personalization signals are unavailable.

- Marketplace trade-offs between traveler relevance, host fairness, Superhost visibility, supply diversity, conversion, and trust.

- Rollout, experimentation, observability, incident response, abuse prevention, and compliance monitoring across regions.

Your goal is to frame a technically credible product design for a global personalization system that improves Business Travel outcomes while preserving user trust, regulatory compliance, marketplace quality, and Airbnb’s broader host-traveler ecosystem.