Privacy policy
What we collect, why we collect it, and the choices you have.
Shop My Stay helps vacation rental hosts give guests QR how-to guides for the appliances in their rental. This policy explains what we collect, why, who helps us run the service, and the choices you have. Shop My Stay is operated by [PLACEHOLDER: legal entity name], [PLACEHOLDER: mailing address].
What we collect
Host accounts
When you create an account we collect your name, email address, password (stored by our authentication provider, never in plain text), the plan you choose, the booking platforms you list on, and, if you choose the AI agent plan, your mobile number. We also keep the shipping address you give us for your kit.
Waitlist and support forms
If you join the waitlist we collect what you type in: your name, email address, number of properties or units, and, if you add them, your market, platforms, company, role, phone number and message. If you contact support we collect your name, email address, topic and message. For both forms we also record how you found us (the page you landed on, the referring site and any campaign tags in the link) and your browser type. To stop abuse we keep a one-way hash of your IP address for a short time, not the address itself.
Property and item data
Hosts can add property details (for example a listing link, name, city, check-in and check-out times and house rules), the appliances and items in each property, notes for guests, how-to video links, restaurant recommendations and product links. When you import a listing link, we fetch the public listing page to fill in these details for you.
Guest scan pages
Guests don't need an account. When a guest scans a sticker we record which sticker was scanned, the time, the general device type (for example phone or desktop), the country the scan came from, and the result (for example which page was shown). We don't record a guest's name, contact details or IP address. Hosts see scan counts for their own stickers.
Payments
Payments are handled by Stripe. We don't see or store your full card number. We keep your Stripe customer ID, your plan and your subscription status so we know what you've paid for.
How we use it
- To run your account, ship your kit and show the right guide when a sticker is scanned.
- To answer support requests and waitlist questions, and to email you about your account, your kit and, if you joined the waitlist, when spots open.
- To keep the service secure, prevent abuse and fix problems.
- To understand, in aggregate, how the service is used so we can improve it.
We don't sell your personal information.
Service providers we use
We use a small number of companies to run Shop My Stay. They process data for us under their own terms and security practices:
- Supabase: database and sign-in (account, property, item, waitlist, support and scan data).
- Stripe: payments and subscription billing.
- Resend: sending account, waitlist and support emails.
- Cloudflare: hosting the website and guest pages, and delivering them quickly and securely.
- Notion: an internal backup of sticker and kit records.
Our pages also load fonts from Google Fonts, and guide pages may embed how-to videos from YouTube (using its privacy-enhanced mode). Those services receive standard technical information such as your IP address and browser when the content loads.
Affiliate and product links on guest pages
Guest pages can include links to products, such as replacement parts or the items in the rental. Some of these are affiliate links, which means Shop My Stay or the host may earn a commission if a guest buys something, at no extra cost to the guest. When a guest follows one of these links they leave Shop My Stay, and the store's own privacy policy applies.
Cookies and similar storage
We use a small number of cookies and browser storage that the service needs to work:
- Sign-in cookies: when you sign in we set secure, HTTP-only cookies that keep you signed in. They're cleared when you sign out.
- Browser storage: we save things like a setup draft and your preferred map view in your browser, and the waitlist form remembers how you arrived for the length of your visit.
- Stripe sets its own cookies on its checkout pages to process payments and prevent fraud.
We don't use advertising cookies.
How long we keep it
We keep account and property data while your account is open, and for a reasonable period afterwards to meet legal, tax and accounting needs. Waitlist and support messages are kept for as long as they're useful to answer you or follow up. Abuse-prevention records are short-lived.
Your choices
- You can update most account, property and item details in your portal at any time.
- You can ask us for a copy of your personal information, to correct it, or to delete it. Depending on where you live you may have more rights under local law.
- You can unsubscribe from waitlist emails by replying to one or contacting us.
Security
We protect data with access controls, encryption in transit and database rules that limit each host to their own data. No system is perfectly secure, so please use a strong, unique password.
Children
Shop My Stay is for adults who host rentals. We don't knowingly collect personal information from children.
Changes
If we change this policy we'll update the date at the top, and for significant changes we'll let account holders know by email.
Contact us
Questions or requests about your privacy? Contact support and choose any topic. We'll reply by email.