How OpenStays handles data

Account and contact details: your email address, verification status, session records, and any name you choose to provide.

Property profile details: property or agency name, website/contact URLs, location fields, capacity, amenities, policies, media URLs, suitability notes, caveats, address privacy preference, and publication status.

Setup and enquiry details: property URLs, contact email, notes you submit, and permission for OpenStays to contact you about your profile.

Technical records: essential authentication cookies, API usage events if developer access is used, timestamps, and basic service logs needed to keep the site secure and working.

To create, verify, save, publish and maintain OpenStays property profiles.

To send login/verification emails and operational messages about your profile or setup request.

To prepare requested AI-assisted draft profiles from public or submitted property pages.

To protect the service, prevent duplicate or misleading profiles, debug problems, and improve data quality.

To make published profile information available to people, search engines, and AI travel agents through public pages, JSON, Markdown, API, sitemap and structured-data endpoints.

Contract or pre-contract steps: when you ask us to create an account, profile, setup request or draft.

Legitimate interests: operating OpenStays, keeping profiles accurate, preventing abuse, improving the service, and contacting business/property operators about relevant OpenStays profile activity where appropriate.

Consent: where you tick a permission box, ask for optional assistance, or later opt into optional marketing or non-essential processing.

Legal obligation: where we need to keep or disclose limited records to comply with law or respond to valid legal requests.

Only profiles you publish, or ask us to prepare for your approval, are intended for public discovery. Draft profiles stay private until published.

Published profiles may include property name, public website/contact route, approximate or exact location depending on your setting, property facts, amenities, policy notes, suitability notes, public media URLs, confidence signals and machine-readable profile data.

Private account data, email verification tokens, session cookies and unpublished drafts are not intentionally published.

OpenStays may store full address details to reduce duplicates and improve profile quality, but you control public location visibility. By default, the product is designed to show limited public location detail unless you choose more precise visibility.

Do not publish an address or exact coordinates unless you have the right to share them and are comfortable with them being indexed by search engines and AI systems.

We use service providers to operate OpenStays, including hosting, database, email delivery, analytics/security logs, AI-assisted drafting/research tools and developer infrastructure. They process data for OpenStays so the service can run.

We do not sell personal data. We do not act as a booking agent, payment processor, travel seller, escrow provider or property inspector.

We keep account, lead, setup request and profile records while needed to provide the service, maintain audit/security records, resolve disputes, or comply with law.

Expired verification tokens and sessions may be deleted or anonymised. Published profile data may remain publicly cached by third parties even after removal from OpenStays.

Depending on where you live, you may have rights to access, correct, export, delete, restrict or object to processing of your personal data, and to withdraw consent where processing relies on consent.

Email privacy@openstays.ai to exercise these rights. We may need to verify that you control the relevant email address or property profile before making changes.

OpenStays uses cloud services that may process data outside your country. Where required, we rely on appropriate safeguards such as provider terms, data-processing agreements and standard contractual clauses.

For privacy questions, profile removal, data access or deletion requests, contact privacy@openstays.ai.

This policy is a practical launch version and should be reviewed by a qualified lawyer as OpenStays grows, especially before paid plans, large-scale outreach, or deeper integrations are added.