Skip to content
stayveo

Privacy policy

Short version: our free tools run in your browser and we don't store what you type into them. For hosts with an account we keep what the booking service needs, we process their guests' data only on their behalf, and we never sell or share personal data for advertising.

Last updated: 10 October 2026.

Who we are

Stayveo ("we") operates stayveo.com and the Stayveo booking service for short-term rental hosts. Contact for privacy questions: privacy@stayveo.com.

We have two roles. For visitors of stayveo.com, users of the free tools and hosts with an account, we decide how data is used (we are the controller). For the guests of a host, who book or read a guide on the host's Stayveo website, the host is the controller and we process their data only on the host's instructions (we are the processor, see the terms).

What we collect and why

Free tools. Calculators, sign makers and generators run in your browser. What you type (prices, WiFi names and passwords, house rules) is processed on your device and is not sent to us. One tool needs our server for a moment: the cleaning schedule fetches the calendar links you paste, returns the dates and keeps nothing.

Host accounts. When you sign up we keep your name, e-mail address, password (only as a secure hash, never readable), business name, country, currency and language, and whatever you add to run your business: properties, photos, prices, texts, calendar links, guest guides and payment settings (your Stripe account ID or PayPal e-mail address; we never see your card or bank details). Legal basis: performing our contract with you. We also keep security records (sign-ins, sessions) to protect your account: legitimate interest.

Subscription payments. Your subscription is paid through Stripe, which handles your card. We keep the Stripe customer and subscription references, your plan status and the billing details Stripe sends us. Legal basis: contract, and our legal obligation to keep accounting records.

Bookings and guests (on behalf of hosts). When a guest books on a host's website we store, for that host, the guest's name, e-mail address, phone number if given, dates, number of guests, messages and the payment status. The guest pays the host directly through the host's own Stripe or PayPal account. We send booking e-mails on the host's behalf. Guests should read the host's own privacy information and contact the host about their data; we help hosts answer such requests.

Guest guides. We count views and clicks on guest guides per day and property, without cookies, names, IP addresses or other personal data.

Translation of your texts. When you press "Translate" for a property's texts, those texts are sent to DeepSeek, an AI translation service, and the result is shown to you to check before you save. Property texts describe a place, not people: please don't put personal data in them.

E-mails. We send you account codes, booking notifications and important service messages. You can't opt out of these while you have an account; we don't send newsletters without your consent.

Early access and contact. When you joined early access or write to us, we keep your e-mail address and what you chose to tell us. Legal basis: your consent and our legitimate interest in answering you. You can withdraw at any time.

Website statistics. We count anonymous events per day, tool and language (for example "a sign was printed"), without cookies, IP addresses or other personal data. Our servers keep technical logs (IP address, browser, pages requested) for up to 30 days for security and to fix errors.

Cookies. A session cookie keeps you signed in after you log in (strictly necessary), and a functional cookie remembers the language you chose. We don't use advertising or tracking cookies.

Who processes data for us

  • Hetzner Online GmbH (Germany): servers and database.
  • Cloudflare, Inc.: domain name service and receiving e-mails sent to @stayveo.com addresses.
  • Resend, Inc. (EU region): sending e-mails.
  • Stripe: subscription payments. For guests' payments the host contracts with Stripe directly.
  • PayPal: when a host accepts PayPal, the guest pays the host through PayPal under PayPal's own terms.
  • DeepSeek: only the property texts a host chooses to translate.

They process data only for these purposes. Where a provider is outside the European Economic Area, we rely on the EU Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.

How long we keep it

  • Account data: as long as your account exists. When you close it we delete your data within 30 days, except billing records we must keep for as long as tax and accounting law requires.
  • Guests' booking data: as long as the host's account exists, or until the host deletes it.
  • Early-access and contact data: until you ask us to delete it, or 24 months after our last contact.
  • Server logs: 30 days. Database backups: 14 days.

Security

Connections are encrypted (HTTPS), passwords are stored only as hashes, access to servers is limited to the people who run the service, and backups stay in the EU.

Your rights

You can ask to see, correct, export or delete your data, object to processing, or withdraw consent, by writing to privacy@stayveo.com. You also have the right to complain to your data protection authority. Guests of a host should write to the host first; if you write to us, we pass your request on.

Changes

If we change this policy we will update the date above and tell account holders about important changes by e-mail.