Legal
Privacy Policy
Last updated: July 2, 2026
This Privacy Policy explains what information StayInventory collects, how we use and share it, and the choices and rights you have. We built StayInventory for short-term rental hosts, and we know the data you store — including guest details and property media — can be sensitive. We treat it accordingly.
1. Scope of this policy
This policy applies to information we process when you visit our website, create an account, or use the StayInventory service (the “Service”). It does not apply to third-party websites or services that we link to but do not control.
Where you upload information about other people — such as guests or staff — you act as the controller of that data, and StayInventory acts as a processor on your behalf. You are responsible for having a lawful basis to share that information with us.
2. Information we collect
We collect the following categories of information:
- Account information — your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your basic profile and email from Google.
- Property & inventory data — the properties, items, descriptions, and other records you create.
- Guest & inspection data — guest names, stay dates, inspection notes, and the outcomes you record.
- Uploaded media — the photos and video you attach to items or inspections.
- Billing information — plan and subscription status. Card details are handled by our payment processor; we do not store full card numbers.
- Usage & device data — log data, IP address, browser type, and interactions with the Service, collected automatically to keep it secure and reliable.
3. How we use your information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Authenticate you and secure your account.
- Process subscriptions, trials, and payments.
- Store and display the inventory, guest records, and media you upload.
- Respond to your requests and provide customer support.
- Detect, prevent, and address fraud, abuse, and security incidents.
- Comply with legal obligations.
We do not sell your personal information, and we do not use the content you upload to train advertising profiles.
4. Legal bases for processing
Where required by law (for example, under the GDPR), we process your information on the following legal bases: performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and your consent where it is specifically requested.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. When you delete content or close your account, we remove the associated data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in backups for a limited time before being overwritten.
7. How we protect your data
We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and hashed password storage. No system is perfectly secure, however, and we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.
8. Your rights & choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these rights directly in the Service — for example, by editing records or exporting a CSV copy of your data — or by contacting us.
We will respond to verified requests within the time required by applicable law. If you believe we have not addressed your concern, you may have the right to lodge a complaint with your local data protection authority.
9. International data transfers
We may process and store information in countries other than the one in which you live. Where we transfer personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect it in line with applicable law.
11. Children's privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, if appropriate, notify you by email or within the Service. Your continued use of the Service after the changes take effect signals your acceptance of the updated policy.