Privacy Policy

• —Account data — name, email and login, via our authentication provider (Clerk).
• —Property & operational data — units, prices, calendars, reservations and notes you enter.
• —Guest data — names, emails and booking details that hosts add or that guests submit on a direct-booking page.
• —Payment data — handled by Paddle; we store only a customer/subscription reference, never card numbers.
• —Call bookings — the name, email and time you give when you book a call with us through Google Calendar.
• —Newsletter — your email address and language, if you sign up in the footer. Nothing is sent until you confirm by the link we email you; every issue has a one-click unsubscribe, and we keep the address until you use it.
• —Technical data — IP, device/browser and basic usage needed to run and secure the Service.

To provide and secure the Service, process subscriptions, send service and guest communications you trigger, and improve the product. We do not sell personal data.

We share data only with sub-processors needed to run the Service:

• —Clerk — authentication / accounts
• —Supabase — database & storage
• —Paddle — subscription payments and invoicing
• —Vercel — hosting
• —OpenRouter — optional AI text features
• —Google — scheduling of calls booked from our website (Google Calendar)
• —Resend — guest & service emails

We use strictly necessary cookies for login/session and a small cookie to remember your theme and language. We do not use advertising cookies.

If you use the in-app AI assistant, your conversation with it — including guest details it looked up for you, such as names, email addresses and phone numbers — is kept in your browser's local storage on that device, separately for each user and property, so that it survives a reload of the page. It is kept for at most 24 hours after your last message: after that the app no longer uses it and removes it the next time it is opened. It is also deleted when you clear the conversation or sign out. It is not a cookie and stays on your device; what you send to the assistant is processed as described above.

We keep data while your account is active and as required for legal/accounting purposes, then delete or anonymize it. You can request deletion at any time.

If you are in the EU/EEA you have the right to access, correct, delete, restrict, port and object to processing of your personal data. To exercise these, email info@staywick.com. You may also lodge a complaint with your local data-protection authority.

Access is protected by per-tenant isolation and encryption in transit. Some processors may process data outside your country under appropriate safeguards.

We may update this policy; material changes will be posted here. Questions: info@staywick.com.