Privacy Policy

This Policy covers personal data processed across:

• the StayKeasy mobile app and traveler/marketplace experiences;
• business and partner surfaces, including business and team accounts;
• the Guest Agent Platform ("GAP"), used by businesses to configure AI guest agents;
• the GAP website widget embedded on a business's own site; and
• the GAP WhatsApp channel, connected via Meta's Embedded Signup.

We collect the following categories of information, depending on how you use StayKeasy:

• Account and profile data — name, email, phone number, authentication credentials, profile photo, and language preference.
• Business and workspace data — business name, address, category, team member roles, and Workspace configuration settings.
• Guest conversations — messages exchanged between guests and a business's AI agent through the website widget, WhatsApp, or other connected channels, including timestamps and message metadata.
• Leads and contact requests — contact details and inquiry content submitted through forms, chat, or WhatsApp.
• Knowledge sources and content — documents, FAQs, descriptions, and other content a business uploads to power its AI agent.
• Services, offers, and policies — service listings, pricing, availability, and cancellation/refund policies a business configures.
• WhatsApp connection metadata — a business's WhatsApp Business Account (WABA) ID, phone number ID, display name and number, connection/verification status, and message delivery status.
• Billing and subscription data — plan, billing cycle, invoices, and payment metadata processed via Stripe. We do not store full card numbers.
• Usage, logs, and diagnostics — device/browser information, IP address, feature usage, and security or error logs.

A business's AI agent uses the business knowledge, services, and policies that business has configured, together with the current conversation, to answer guests. Conversations may be stored so the business can review them, follow up with guests, improve the quality of its agent, and maintain continuity of service across a guest's interactions.

To generate responses, prompts and conversation context are sent to AI providers (such as OpenAI) that process this information on our behalf to power the product. These providers do not use StayKeasy customer data to train their own general-purpose models under our agreements with them.

• Operate, maintain, and improve StayKeasy and the Guest Agent Platform;
• power AI agent responses and personalize the guest and business experience;
• process bookings, leads, and payments;
• communicate with you about your account, bookings, or Workspace;
• maintain security, detect abuse, and troubleshoot issues; and
• comply with legal, tax, and regulatory obligations.

We do not sell personal data. We share information with the service providers that help us run StayKeasy, and only to the extent needed for them to provide their service:

• Meta / WhatsApp — to deliver WhatsApp messages and manage a business's connected WhatsApp Business Account.
• Clerk — account authentication and session infrastructure.
• PlanetScale — relational database infrastructure.
• Railway — application hosting and media storage infrastructure.
• Vercel — web app hosting and delivery.
• Railway — backend server hosting.
• Stripe — payment and subscription processing.
• AI providers (e.g., OpenAI) — to generate AI agent responses.
• Email and messaging providers — to deliver transactional emails and notifications.

Within a Workspace, a business and its team members can see the guest conversations, leads, and configuration data belonging to that Workspace. We may also disclose information when required by law or to protect the rights, safety, or property of StayKeasy, our users, or the public.

We retain personal data for as long as needed to provide StayKeasy and for legitimate operational, legal, security, billing, and service-continuity reasons. Business Workspace records and guest conversations are generally retained for as long as the Workspace is active, since businesses rely on them for ongoing customer service and continuity, and for a reasonable period after to satisfy legal, tax, or dispute-resolution needs.

Raw logs and webhook diagnostics (for example, WhatsApp delivery events) are retained only as long as needed for security, debugging, and operational purposes, and are deleted or aggregated on a rolling basis.

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, or receive a copy of (port) your data, and the right to object to or restrict certain processing. If you are in the EU/EEA or UK, these rights are available to you under the GDPR or UK GDPR.

To exercise any of these rights, contact us using the details in Section 12, or see our Data Deletion page for how to request deletion specifically. We may need to verify your identity before acting on a request, and some data (for example, business records needed for billing or legal compliance) may need to be retained even after a request, as explained in Section 6.

We use reasonable technical and organizational measures to protect personal data, including encryption in transit and access controls limiting who can view Workspace and guest data. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored by StayKeasy.

Some of the service providers listed in Section 5 may process data outside the country where you or your guests are located, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards, such as standard contractual clauses or the provider's own compliance certifications, to protect that data.

StayKeasy is intended for users who are at least 18 years old (see our Terms & Conditions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to remove it.

We may update this Privacy Policy from time to time. Material changes will be communicated in‑app or by other reasonable means. Continued use of StayKeasy after changes take effect means you accept the revised Policy.