Last updated: May 30, 2026
Your privacy matters to us. This policy explains what we collect, how we use it, where it's processed, and the choices you have.
1. Information we collect
We collect information you provide (your name, email, phone, profile, and listing details), information generated as you use the platform (bookings, messages, and reviews), billing details handled by our payment processors, and identity-verification data processed by Stripe Identity when you become a host.
2. How we use information
We use your information to operate the platform, process bookings and payments, verify host identity, prevent fraud, provide support, and improve our services.
3. Sharing and sub-processors
We share information only as needed to run the service — with hosts or guests to complete a booking, and with the trusted providers ("sub-processors") listed below. We never sell your personal data.
4. Security
Your data is encrypted in transit (TLS 1.2+) and at rest (AES-256), and access is governed by row-level security so each person can reach only their own data. SimpleStay runs on infrastructure provided by Supabase (hosted on Amazon Web Services), which maintains SOC 2 Type 2 and ISO 27001 certifications.
5. Sub-processors
We rely on a small set of providers to operate: Supabase (database, authentication, and file storage, on AWS), Vercel (application hosting), Stripe (host subscription billing and identity verification), Mercado Pago (guest booking payments), and Google (optional Google sign-in). Each processes data only to provide its service to us.
6. Where your data is processed
Your data is primarily processed in the United States. For users in the EU and UK, international transfers rely on the European Commission's Standard Contractual Clauses (SCCs); a Data Processing Addendum (DPA) and Transfer Impact Assessment (TIA) are maintained with our infrastructure provider.
7. Your rights and choices
You can access, correct, export, or delete your information at any time from your account settings or by emailing us. Depending on where you live, you may have additional rights under the GDPR or similar laws.
8. Contact us
Questions about privacy or a data request? Email privacy@simplestay.ai and our team will help.