Privacy Policy

We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party services.

Information you provide:

• Account information: your name, email address, and password when you sign up
• Listing content: property details, WiFi credentials, parking instructions, house rules, and any other information you enter to build your guest sheets
• Billing information: payment card details and billing address, processed securely through Stripe — we never store your full card number
• Communications: messages you send us via email or support channels

Information collected automatically:

• Usage data: pages visited, features used, time spent on pages, and actions taken within the app
• Device information: browser type, operating system, IP address, and device identifiers
• Cookies and similar tracking technologies to keep you logged in and improve your experience

We use the information we collect to:

• Create and manage your account
• Provide, operate, and improve StaySheets
• Process payments and manage your subscription through Stripe
• Display your guest sheets to guests via your shared listing links
• Send you transactional emails such as account confirmations, receipts, and important service updates
• Send you marketing emails and product updates (you can opt out at any time — see Section 6)
• Respond to your questions and support requests
• Monitor and analyze usage to improve the product
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes. We only share information in the following limited circumstances:

• Service providers: We share data with third-party companies that help us operate StaySheets, including Supabase (database and authentication) and Stripe (payments). These providers are contractually required to protect your data and may only use it to provide services on our behalf.
• Your guest links: The listing content you create is visible to anyone you share your guest link with. You are responsible for the content you publish on your sheets.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or to protect the rights and safety of StaySheets, our users, or the public.
• Business transfers: If StaySheets is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.

StaySheets uses the following third-party services that may collect or process your data:

• Supabase — provides our database and user authentication. Your account data and listing content are stored on Supabase infrastructure. See Supabase's privacy policy at supabase.com/privacy.
• Stripe — processes all payments and subscription billing. Stripe collects and stores your payment information directly and is PCI-DSS compliant. We never see or store your full card details. See Stripe's privacy policy at stripe.com/privacy.

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies directly.

StaySheets is a tool for property hosts. When guests view a listing sheet via a shared link, we may collect basic technical data such as their IP address and browser information for security and analytics purposes.

Guests do not create accounts and we do not collect personal information from them beyond what is automatically captured during a standard web page visit. We do not use guest visit data for advertising or share it with third parties for marketing.

Host responsibility: As a host using StaySheets, you are responsible for ensuring that the content you publish on your guest sheets — including any personal details about your property or guests — complies with applicable laws and the privacy expectations of your guests.

With your consent, we may send you emails about new features, product updates, tips for hosts, and promotional offers. You can opt out of marketing emails at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email, or
• Emailing us at [email protected] with the subject line "Unsubscribe"

Please note that even if you opt out of marketing emails, we will still send you transactional messages related to your account and subscription (such as payment receipts and security alerts).

We retain your account information and listing content for as long as your account is active or as needed to provide our services.

If you cancel your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as payment records, which may be retained for up to 7 years as required by tax law).

You may request deletion of your data at any time by contacting us at [email protected].

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. These measures include encrypted data storage through Supabase, HTTPS encryption for all data in transit, and access controls limiting who can view your data.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at [email protected].

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your account
• Deletion: Request that we delete your personal information
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

StaySheets is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with their information, please contact us at [email protected].

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and by updating the "Last updated" date at the top of this page.

Your continued use of StaySheets after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us.