StayPilot Privacy Policy
Data we process
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, email, phone, verification results | Guests, owners, vendors; booking channels; screening providers |
| Reservation & stay | Dates, party size, preferences, house-rule acknowledgments | Guests, channels |
| Communications | Messages across channels (Airbnb/Vrbo/email/SMS/WhatsApp), call notes | Users; carriers |
| Payments | Amounts, payment status, payout records — card numbers are held by our payment processor, not by us | Processor (e.g., Stripe) |
| Device & access | Lock status, code lifecycle events, entry events, battery; noise levels (no audio recording) | Smart devices at properties |
| Platform usage | Log-ins, actions, audit events, IP/session metadata | Platform |
Why we process it (legal bases)
To perform contracts (manage stays, coordinate services, pay owners and vendors); legitimate interests (security, fraud prevention, service improvement); legal obligations (tax, accounting, lawful requests); and consent where required (marketing, certain automated communications). Automated decision-making within configured policies is described in the AI & Automation Disclosure; you may request human review of significant automated decisions.
Sharing
With property owners (their properties' operational data), vendors and cleaners (job-scoped details only), booking channels, payment processors, smart-lock and messaging providers, screening services, and professional advisors — each limited to what their function requires. We do not sell personal information. Service providers are bound by contract to use data only for our instructions.
Retention & security
Operational records are retained for the life of the relationship plus statutory periods (tax/audit, typically 7 years), then deleted or de-identified. Access codes are masked by default; code reveals are logged. Role-based access control limits every account to data its role requires. Data is encrypted in transit and at rest by our infrastructure providers.
Business outreach data
To reach short-term-rental operators who may benefit from StayPilot, we process business contact information from public sources, including government short-term-rental license registries (name, business contact details, license/market information). We use it only for business-to-business outreach, honor unsubscribe requests immediately and permanently via a suppression list checked before every send, and never sell it. To opt out or ask what we hold, email privacy@staypilot.work or use the one-click unsubscribe link in any message.
Your rights
Depending on your jurisdiction: access, correction, deletion, portability, restriction, objection, and appeal of automated decisions. Submit requests to privacy@staypilot.work; we verify identity before acting and respond within the statutory period. Guests may opt out of non-essential messages at any time (service-essential messages — e.g., access codes — continue for active stays).
Contact
Stardrive Inc. (d/b/a StayPilot), Sarasota, FL — privacy@staypilot.work. *Effective date: July 19, 2026 (added business outreach data disclosure).*