Privacy Policy
Last updated 28 October 2026
Staywise (mystaywise.com) helps holiday-rental hosts publish a welcome guide for their guests. This page explains, in plain language, what personal data we handle, why, and what you can do about it. Staywise is the data controller for host accounts. For guest requests, the host is responsible for how they use the details a guest sends them.
What we store about hosts
- Account: email address and a securely hashed password.
- Property content: property name, area, your first name, WhatsApp number, check-in times, notes, the generated guide, cover photo, Wi-Fi details, door code and optional guest PIN.
- Extras: the extras you offer, prices and your own payment links.
- Billing: your plan and Stripe customer/subscription IDs. We never see or store card numbers.
- Usage limits: timestamps of AI guide generations, to keep costs fair.
What we store about guests
- Extra requests: the name, phone or email and optional message a guest types when requesting an extra. These are shared only with that property's host, to arrange the request.
- Guide views: the date, language and IP address when a guide is opened, used to count views and prevent abuse.
- PIN attempts: the IP address and time of wrong PIN entries, used to block brute-force guessing.
Guests don't need an account. We use no advertising or tracking cookies; the guide only remembers in your browser that you already opened it today.
Why we use it (legal bases)
- To provide the service you signed up for (contract): accounts, guides, extras, billing.
- To keep the service secure and fairly priced (legitimate interest): view counts, PIN lockouts, AI limits.
- To pass a guest's request to their host (the guest's request / legitimate interest).
How long we keep it
- Account and property data: until you delete the property or your account.
- Guest extra requests: 18 months, then deleted automatically.
- Guide views and PIN attempts: 13 months, then deleted automatically.
- Billing records held by Stripe: as required by tax law.
Who processes it for us
- Lovable Cloud — hosting, database, sign-in and file storage.
- AI provider (via the Lovable AI gateway, e.g. Google Gemini) — receives your property notes to write and translate the guide. Codes and PINs are not sent.
- Stripe — subscription payments and invoices.
Some processors may handle data outside the EU under appropriate safeguards such as the EU Standard Contractual Clauses.
Your rights
You can access, correct, export or delete your data. Hosts can delete a property in the editor, or delete their whole account (including photos and guest requests) from the account menu in the dashboard; an active subscription is cancelled at the same time. Guests who want a request removed can ask the host or write to us. You may also complain to your local data protection authority.
Contact
Questions or requests: alexis.marousi@gmail.com.