Privacy Policy

This Privacy Policy explains how Simple Stay ai, Inc. (“SimpleStay,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information through the SimpleStay Platform.

1. Scope

This Policy applies to Guests, Hosts, visitors, applicants, business contacts, and other individuals who interact with SimpleStay. It does not govern third-party services that publish their own privacy policies, including Stripe, Google, or independently operated Host websites.

2. Information We Collect

Account and identity information

We may collect names, email addresses, telephone numbers, profile information, authentication identifiers, language, country, and account settings.

Host and listing information

We may collect property addresses, listing descriptions, photos, amenities, availability, house rules, tax information, business details, licenses, and proof of authority to list.

Booking and transaction information

We may collect dates, Guest counts, booking details, pricing, fees, refund information, transaction identifiers, and communications relating to a booking.

Payment and verification information

Stripe or another payment provider may collect card, bank, tax, identity, KYC, AML, and payout information directly. We may receive limited status information, such as verification status, payment confirmation, payout status, dispute status, or the last digits of a payment method.

Communications

We collect messages, support requests, reports, reviews, survey responses, and records of communications.

Device, usage, and technical information

We may collect IP address, browser, device identifiers, operating system, referral source, pages viewed, session events, approximate location, cookie identifiers, performance data, and analytics.

Security and diagnostics

We may collect logs, authentication events, crash reports, error traces, fraud indicators, and information needed to investigate incidents.

3. Sources

We collect information directly from you, automatically from your device, from Hosts or Guests involved in a transaction, from payment and identity providers, from authentication providers, from public sources, and from service providers supporting the Platform.

4. How We Use Information

We use personal information to:

• create and secure accounts;
• authenticate users;
• publish and manage listings;
• facilitate bookings, payments, payouts, refunds, and disputes;
• verify identity, businesses, and properties;
• provide support and communications;
• detect fraud, abuse, sanctions risk, and security incidents;
• enforce terms and policies;
• improve functionality, reliability, and user experience;
• personalize content and measure Platform performance;
• comply with tax, accounting, legal, regulatory, and law-enforcement obligations;
• establish, exercise, or defend legal claims; and
• send marketing communications where permitted.

5. Legal Bases

Where required, we rely on one or more of the following legal bases:

• performance of a contract;
• steps requested before entering a contract;
• compliance with legal obligations;
• legitimate interests, including security, fraud prevention, support, product improvement, and business operations;
• consent; and
• protection of vital interests or other lawful bases recognized locally.

6. How We Share Information

We may share information with:

• Hosts and Guests as necessary for bookings;
• Stripe and other payment, payout, KYC, AML, and fraud-prevention providers;
• Google and authentication or communications providers;
• Vercel, Supabase, cloud-hosting, database, storage, monitoring, and infrastructure providers;
• analytics, customer-support, security, email, and error-monitoring providers;
• professional advisers, auditors, insurers, and corporate transaction participants;
• authorities or third parties where required by law, valid legal process, safety needs, or protection of rights; and
• affiliates or successors in connection with a merger, financing, acquisition, reorganization, or asset transfer.

We do not sell personal information for money. We may use analytics or advertising technologies that certain laws define as “sharing” or “targeted advertising,” subject to available opt-out rights.

7. International Transfers

SimpleStay is based in the United States and uses service providers that may process information in other countries. Where required, we use legally recognized safeguards, such as contractual protections, adequacy mechanisms, consent, or other lawful transfer bases.

8. Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy, including account operation, bookings, security, tax, accounting, dispute resolution, fraud prevention, and legal compliance. Retention periods vary by data type, jurisdiction, and risk. We may retain certain records after account closure where required or permitted by law.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted transmission, secure authentication, restricted access, managed cloud infrastructure, database controls, monitoring, daily backups, and incident-response procedures. No system is completely secure. Users should protect their accounts and promptly report suspicious activity.

10. Cookies and Analytics

We use necessary cookies and similar technologies to operate the Platform. Subject to local law and consent requirements, we may also use analytics, preference, and performance technologies. See the Cookie Policy for more information.

11. Privacy Rights

Depending on your location, you may have rights to:

• access or obtain a copy of personal information;
• correct inaccurate information;
• delete information;
• restrict or object to processing;
• withdraw consent;
• receive portable data;
• opt out of certain marketing, targeted advertising, sale, or sharing;
• appeal a privacy decision; and
• complain to a data-protection authority.

Submit requests to [email protected] with the subject “Privacy Request.” We may verify identity before completing a request. Rights are subject to legal exceptions.

12. Latin America and International Rights

We intend to respond to applicable rights under privacy laws in supported jurisdictions, including Brazil’s LGPD and privacy laws applicable in Mexico, Argentina, Colombia, the Dominican Republic, and other Latin American countries where the Platform is offered. The precise rights, deadlines, legal bases, registration duties, consent standards, and regulator procedures vary by country. Local mandatory law controls where it provides greater protection.

13. Brazil

Where the LGPD applies, individuals may have rights including confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, withdrawal of consent, and review of certain automated decisions. Requests may be sent to [email protected] with the subject “Privacy Request — Brazil.”

14. Children

The Platform is not intended for persons under 18. We do not knowingly allow minors to create accounts. If we learn that a minor provided personal information in violation of this Policy, we will take appropriate steps.

15. Marketing

You may unsubscribe from promotional email using the message link or by contacting us. We may continue sending transactional, security, legal, or account communications.

16. Automated Processing

We may use automated systems to detect fraud, rank listings, identify abuse, personalize content, and support risk decisions. Where required by law, users may request information or human review of qualifying decisions.

17. Changes

We may update this Policy. Material changes will be communicated as required by law. The updated version applies from the stated effective date.

18. Contact

Simple Stay ai, Inc.
8 The Green #26001, Dover, DE 19901, United States
[email protected]
Subject: “Privacy Request”