Privacy Policy

Agency accounts: your email, name and agency name when you sign up, and the apartments and settings you create.

Guests: at checkout we collect the email and name you provide to Stripe, and your booking details (apartment, type of extension, amount, date). We do not store card numbers — payment data is handled entirely by Stripe.

Technical: essential cookies to keep you signed in, and basic server logs for security and reliability.

To provide the service (accounts, apartments, availability, bookings), process payments, send booking confirmations and notifications, and keep the platform secure. The legal bases are the performance of a contract and our legitimate interest in running a reliable service.

We share data only with the processors needed to run StayOn: Supabase (database & authentication), Stripe (payments), Resend (transactional emails), and Vercel (hosting). Each processes data on our behalf under their own terms and security measures.

We keep account and booking data for as long as your account is active and as required to meet legal, accounting and tax obligations, then delete or anonymise it.

Under the GDPR you may request access to, correction of, or deletion of your personal data, object to certain processing, and request data portability. To exercise these rights, email privacy@stay-on.app. You may also lodge a complaint with your local data protection authority.

We use only strictly necessary cookies (for authentication and security). We do not use advertising or tracking cookies.

We may update this policy. Material changes will be reflected by the "Last updated" date above.