Privacy Policy

NURYM AUYEZKHAN, NIF Z3269028C, José Dolz 20, 46111 Rocafort, Valencia, Spain.

Privacy contact: nurymauyezhkhan@icloud.com

Account and billing data:

• email address
• purchase type (personal or business) and, for business purchases, company name, billing address and tax/VAT ID if you provide one
• payment provider customer and subscription identifiers
• subscription status and renewal date

StayCard content you enter:

• property name
• host name and phone or WhatsApp number
• Wi-Fi network name and Wi-Fi password
• check-in and check-out times, check-in notes, parking information
• house rules and any custom rules
• emergency contact, if you add one
• guest languages, card theme and the random identifier of your public guest page
• text or images you paste or upload so that details can be filled in for you

Technical data needed to sign you in and keep the service secure, such as session information.

We do not collect guest identification documents, guest tracking data or demographic data.

To provide the service and perform the contract with you: your StayCard content, account data and subscription data.

To comply with legal obligations: billing and accounting records.

For our legitimate interest in keeping the service secure: session and security data.

Pasted text is currently processed in your browser and is not sent to an external provider.

Uploaded images and pasted text are treated as temporary processing data: they are used to extract the details you confirm, and the source is discarded once it is no longer needed. Source images are never shown on a public guest page.

If an external provider is used for this in the future, it will be named in this policy before it is switched on. Imported content is never used for advertising and is not intentionally used to train models.

Please do not paste or upload IDs, door codes, lockbox PINs, alarm codes or other sensitive information.

StayCard uses automated processing, and where configured external technology providers, to analyse text or images you submit in order to identify StayCard fields, detect the language of your text and translate guest-facing information into the guest languages you select.

Only the information reasonably necessary for the requested processing is sent to the processing provider. That may include:

• custom house rules
• parking information
• check-in instructions and welcome text
• other guest-facing free text you write
• temporarily uploaded screenshots or photos

Unrelated information is not sent for this purpose: billing and payment data, subscription identifiers, authentication data, and Wi-Fi passwords where they are not needed for the requested operation.

Translated results are stored with your StayCard so that a translation does not have to be generated again each time a guest opens your page. Opening a guest page does not trigger any automated processing.

Temporary source images and files are deleted once the extraction they were submitted for is no longer needed. No specific deletion time is promised beyond what the implementation actually guarantees.

Automated translations and extracted details may contain errors. Review guest information before publishing it.

Your content is processed only to provide the StayCard functionality you request. It is not used for our advertising or for unrelated profiling.

Providers used for this processing:

• Lovable AI Gateway — Translating host-written guest text into the selected guest languages, server-side — Processing location to be confirmed before launch — transfer mechanism to be documented before launch

We use only the providers listed below. International transfers, if any, follow the terms configured with each provider.

• Stripe Payments Europe, Ltd. — Payment processing, subscriptions, receipts and invoices (EU / Ireland) — planned, not yet in use
• Supabase — Hosting, database and email sign-in links (EU region (to be confirmed)) — planned, not yet in use

Guest pages use a random, unguessable address, are marked noindex/nofollow and are excluded from the sitemap. They show only the guest information you entered.

Your email address, billing data, payment identifiers and internal subscription data are never shown on a guest page.

Wi-Fi details are shown on the page because that is the point of the card, but they are never placed in page titles or metadata, never logged and never included in analytics events.

Your StayCard stays published for as long as the paid period runs. When the paid period ends, the public guest page is disabled.

Account and property data is then kept for up to 90 days so you can reactivate, after which it can be deleted permanently.

Billing and accounting records are kept for as long as tax and accounting law requires, even after account deletion.

You can request access, correction, deletion, restriction, objection and portability, and you can delete your account and data yourself from your StayCard settings.

Write to nurymauyezhkhan@icloud.com to exercise any right. You can also complain to the Spanish data protection authority (AEPD, www.aepd.es).

StayCard uses only strictly necessary cookies and storage. See the Cookie Policy.