Privacy Policy
Staysy Last updated: April 2026
1. Who We Are
Staysy ("Staysy", "we", "us", or "our") operates the marketing website at staysy.co and the host application at app.staysy.co. We provide a digital concierge platform for short-term rental hosts and their guests.
For the purposes of data protection law, Staysy is the data controller for information collected through this website and the host application.
Contact: For all privacy-related enquiries, please write to: hello@staysy.co
2. What Data We Collect and Why
2.1 Information You Give Us Directly
| Data | When | Why |
|---|---|---|
| Email address | Registration, contact forms | To create and manage your account; to send you service communications |
| Name | Registration | To personalise your experience and address you correctly |
| Payment information | Subscribing to a paid plan | To process your subscription (handled via our payment processor — we do not store full card details) |
| Property information | Setting up your host profile | To generate guest guides for your properties |
| Communications with us | Email, in-app messages | To respond to your enquiries and improve support |
2.2 Information We Collect Automatically
When you visit staysy.co or use app.staysy.co, we automatically collect:
- Usage data: Pages visited, features used, session duration, click interactions
- Device and browser data: Browser type, operating system, screen resolution, language preference
- IP address: Used to infer approximate country/region and to detect abusive activity
- Cookies and similar technologies: See Section 7 (Cookies) for full details
2.3 Information From Third Parties
If you register or log in using Google, we receive from Google your name, email address, and profile picture, as permitted by Google's OAuth consent screen. We do not receive your Google password.
2.4 Guest Data Processed on Your Behalf
As a host using Staysy, you may add information about your guests (such as names or stay dates) to your guest guides. In that scenario:
- You are the data controller for your guests' personal data.
- Staysy acts as a data processor on your behalf.
- You are responsible for ensuring you have a legal basis (such as your guests' consent or contractual necessity) to share their data with Staysy.
- Our processing of guest data on your behalf is governed by our Data Processing Agreement, which forms part of these Terms.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract (Art. 6(1)(b)) — processing is necessary to perform our service |
| Processing payments | Contract (Art. 6(1)(b)) |
| Sending service and security notifications | Contract (Art. 6(1)(b)) or Legitimate Interest (Art. 6(1)(f)) |
| Analytics to improve our service | Legitimate Interest (Art. 6(1)(f)) — we balance this against your privacy rights |
| Marketing communications (optional) | Consent (Art. 6(1)(a)) — you can withdraw at any time |
| Compliance with legal obligations | Legal Obligation (Art. 6(1)(c)) |
4. How We Share Your Data
We do not sell your personal data. We share it only in the following circumstances:
4.1 Service Providers (Processors)
We use trusted third-party providers to operate our service:
- Cloudflare — Content delivery, DDoS protection, and email link protection. Privacy Policy
- Google — Authentication (Google OAuth) and, if you use Google sign-in, profile data. Privacy Policy
- Payment processor — To handle subscription billing. We will identify our payment processor explicitly in the in-app documentation.
- Analytics provider — Anonymised usage analytics to improve the platform.
All processors are bound by data processing agreements and may only use your data to provide services to us.
4.2 Legal Requirements
We may disclose your data if required by law, court order, or to protect the rights, safety, or property of Staysy, our users, or the public.
4.3 Business Transfers
If Staysy is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
5. International Data Transfers
Staysy operates globally. If you are located in the EEA or the UK, your personal data may be transferred to and processed in countries outside the EEA that may not offer the same level of data protection. Where such transfers occur, we ensure appropriate safeguards are in place, such as:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
6. Data Retention
We retain your personal data only for as long as necessary:
- Account data: Retained for the duration of your account plus 2 years after deletion, to comply with financial and legal obligations.
- Payment records: Retained for 7 years in accordance with tax and accounting obligations.
- Usage/analytics data: Anonymised or deleted within 26 months.
- Marketing consent records: Retained for 3 years after your last interaction or until you withdraw consent.
You may request deletion of your account and associated data at any time by contacting hello@staysy.co.
7. Cookies
We use cookies and similar tracking technologies to operate the website and application. Here is a summary:
| Category | Purpose | Can you opt out? |
|---|---|---|
| Strictly Necessary | Session management, security, language preference | No — these are essential |
| Analytics | Understanding how visitors use the site (anonymised) | Yes — via our cookie banner |
| Marketing | Tracking ad campaign performance | Yes — via our cookie banner |
On your first visit, you will see a cookie consent banner. You can change your preferences at any time via the Cookie Settings link in our website footer.
We use Cloudflare for security. Cloudflare may set its own cookies for bot detection and performance. For details, see Cloudflare's Cookie Policy.
8. Your Rights
Depending on your location, you have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure ("Right to be Forgotten") | Ask us to delete your data in certain circumstances |
| Restriction | Ask us to limit how we process your data |
| Data Portability | Receive your data in a structured, machine-readable format |
| Object | Object to processing based on legitimate interests or for direct marketing |
| Withdraw Consent | Where processing is based on consent, withdraw it at any time |
| Automated Decisions | Not be subject to solely automated decisions that significantly affect you |
To exercise any of these rights, email us at hello@staysy.co. We will respond within 30 days. We may ask you to verify your identity before fulfilling the request.
Supervisory Authorities
If you are in the European Union and believe we have processed your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In Spain, this is the:
Agencia Española de Protección de Datos (AEPD) https://www.aepd.es Tel: +34 901 100 099
In other EU member states, contact your national data protection authority.
9. Children's Privacy
Staysy is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
10. Security
We take appropriate technical and organisational measures to protect your personal data, including:
- Encrypted data transmission (HTTPS/TLS)
- Access controls and authentication requirements
- Regular security reviews
- Cloudflare-based DDoS and abuse protection
No method of transmission or storage is 100% secure. We will notify you and the relevant authorities of any data breach where legally required.
11. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending an email. The "Last updated" date at the top of this policy reflects the most recent revision. Continued use of Staysy after changes constitutes your acceptance.
13. Data Processing Agreement
Hosts who use Staysy to manage guest data are acting as data controllers. By using our service, you agree that Staysy will process guest data strictly on your instructions, as set out in our Data Processing Agreement. A copy is available upon request at hello@staysy.co.
14. Contact Us
For any questions, concerns, or requests related to this Privacy Policy:
Staysy Email: hello@staysy.co Website: https://www.staysy.co