1. INTRODUCTION

Welcome to STAYFLIX ("we," "our," or "us"). We respect your privacy
and are committed to protecting your personal data. This privacy
policy explains how we collect, use, and protect your information
when you use our platform.

STAYFLIX provides a direct booking platform that enables vacation
rental hosts to create branded booking websites for their properties.

2. INFORMATION WE COLLECT

We collect information in the following ways:

2.1 INFORMATION YOU PROVIDE TO US

When you create an account or use our services, you may provide:

• Account Information:

  • Name

  • Email address

  • Phone number (optional)

  • Business name

  • Payment information (processed by Stripe)

• Property Information:

  • Property names and descriptions

  • Property photos

  • Property addresses

  • Pricing information

  • Availability data

• Guest Booking Information (collected on behalf of hosts):

  • Guest names

  • Guest email addresses

  • Guest phone numbers

  • Booking dates

  • Special requests

  • Payment information (processed by Stripe)

• Communication Data:

  • Support requests

  • Email correspondence

  • Feedback and surveys

2.2 INFORMATION WE COLLECT AUTOMATICALLY

When you use STAYFLIX, we automatically collect:

• Technical Information:

  • IP address

  • Browser type and version

  • Device information

  • Operating system

  • Time zone setting

• Usage Data:

  • Pages visited

  • Time spent on pages

  • Links clicked

  • Features used

  • Booking activity

• Cookies and Similar Technologies:

  • See Section 8 for details

3. HOW WE USE YOUR INFORMATION

We use your information to:

3.1 PROVIDE OUR SERVICES

• Create and manage your account

• Enable you to create booking websites

• Process bookings and payments

• Send booking confirmations and notifications

• Provide customer support

• Communicate important updates

3.2 IMPROVE OUR SERVICES

• Analyze usage patterns

• Debug technical issues

• Develop new features

• Conduct research and testing

• Improve user experience

3.3 COMMUNICATE WITH YOU

• Send service-related emails

• Respond to inquiries

• Send product updates (you can opt out)

• Request feedback

• Send marketing communications (with consent)

3.4 ENSURE SECURITY AND COMPLIANCE

• Prevent fraud and abuse

• Enforce our Terms of Service

• Comply with legal obligations

• Protect our rights and property

4. LEGAL BASIS FOR PROCESSING (GDPR)

If you are in the European Economic Area (EEA), we process your
personal data based on:

• Contract Performance: To provide our services to you

• Legitimate Interests: To improve our services and prevent fraud

• Legal Compliance: To comply with legal obligations

• Consent: For marketing communications (you can withdraw consent)

5. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We share data only in
these circumstances:

5.1 SERVICE PROVIDERS

We share data with trusted third-party service providers:

• Stripe: Payment processing (see Stripe Privacy Policy)

• Email Service: Sending notifications (e.g., SendGrid)

• Hosting Services: Data storage and infrastructure (e.g., AWS)

• Analytics: Usage tracking (e.g., Google Analytics)

• Customer Support: Help desk tools (e.g., Intercom)

These providers are contractually obligated to protect your data.

5.2 BUSINESS TRANSFERS

If STAYFLIX is acquired or merged, your data may be transferred
to the new owner. We will notify you before this happens.

5.3 LEGAL REQUIREMENTS

We may disclose data when required by law or to:

• Comply with legal process

• Enforce our Terms of Service

• Protect rights, property, or safety

• Prevent fraud or abuse

5.4 WITH YOUR CONSENT

We may share data with your explicit consent for other purposes.

6. DATA SECURITY

We implement appropriate technical and organizational measures
to protect your data:

• Encryption: Data is encrypted in transit (SSL/TLS) and at rest

• Access Controls: Limited employee access on need-to-know basis

• Regular Audits: Security reviews and vulnerability testing

• Secure Infrastructure: Industry-standard hosting and databases

However, no method of transmission over the internet is 100%
secure. We cannot guarantee absolute security.

7. DATA RETENTION

We retain your data as long as:

• Your account is active

• Needed to provide services

• Required for legal, tax, or accounting purposes

When you delete your account:

• We delete or anonymize your data within 90 days

• Some data may be retained longer for legal compliance

• Backups may contain data for up to 90 additional days

8. COOKIES AND TRACKING

We use cookies and similar technologies to:

• Remember your preferences

• Keep you logged in

• Analyze usage patterns

• Improve our services

8.1 TYPES OF COOKIES WE USE

• Essential Cookies: Required for basic functionality

• Analytics Cookies: Help us understand usage (Google Analytics)

• Preference Cookies: Remember your settings

8.2 MANAGING COOKIES

You can control cookies through your browser settings. Disabling
cookies may affect functionality.

To opt out of Google Analytics:
https://tools.google.com/dlpage/gaoptout

9. YOUR RIGHTS

Depending on your location, you may have these rights:

9.1 ACCESS AND PORTABILITY

• Request a copy of your data

• Download your data in a portable format

9.2 CORRECTION

• Update or correct inaccurate data

• Complete incomplete information

9.3 DELETION

• Request deletion of your data ("right to be forgotten")

• Note: Some data may be retained for legal reasons

9.4 RESTRICTION

• Limit how we process your data

9.5 OBJECTION

• Object to processing based on legitimate interests

• Opt out of marketing communications

9.6 WITHDRAW CONSENT

• Withdraw consent for data processing (where applicable)

To exercise these rights, email: privacy@stayflix.io

10. INTERNATIONAL DATA TRANSFERS

STAYFLIX is based in USA. If you access our services
from outside USA, your data may be transferred to and
processed in USA.

For EEA users: We use standard contractual clauses approved by
the European Commission to protect your data.

11. CHILDREN'S PRIVACY

STAYFLIX is not intended for users under 18. We do not knowingly
collect data from children. If you believe we have collected data
from a child, contact us immediately at privacy@stayflix.io.

12. THIRD-PARTY LINKS

Our platform may contain links to third-party websites. We are
not responsible for their privacy practices. Please review their
privacy policies.

13. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: What data we collect and how we use it

• Right to Delete: Request deletion of your data

• Right to Opt-Out: Opt out of data "sales" (we don't sell data)

• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise CCPA rights: privacy@stayflix.io

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will:

• Post the updated policy on this page

• Update the "Last Updated" date

• Notify you of material changes via email

Continued use of STAYFLIX after changes constitutes acceptance.

15. CONTACT US

If you have questions about this Privacy Policy or our data
practices, contact us:

Email: privacy@stayflix.io
Support: hello@stayflix.io

For GDPR-related inquiries, contact our Data Protection Officer:
Email: dpo@stayflix.io

Response time: We aim to respond within 30 days.

16. SUPERVISORY AUTHORITY

If you are in the EEA and believe we have not adequately addressed
your privacy concerns, you have the right to lodge a complaint
with your local data protection authority.

© 2025 STAYFLIX. All rights reserved.