StayX

Privacy Policy (StayX)

Effective date: February 1, 2025
Company: StayX (“StayX,” “we,” “us,” “our”)
Contact: connect@stayx.net (including privacy/data rights)

1) Scope

This Privacy Policy explains how StayX collects, uses, shares, and safeguards personal data when you use our websites (including stayx.net and subdomains), apps, booking platform, decentralized applications (“dApps”), smart-contract interactions, and related services (collectively, the “Services”).

2) Key Definitions

  • Personal Data: Information that identifies or can reasonably identify an individual.

  • Usage Data: Technical data about how you use the Services.

  • Wallet Data: Public wallet addresses and on-chain transaction IDs relevant to bookings, rewards, or STAYX token utilities.

  • Special Categories: Sensitive data under applicable law (we do not intentionally collect these unless required for KYC/AML or legal obligations).

3) What We Collect

  • Account & Identity: Name, email, phone, country, language, credentials.

  • Booking & Payment: Itineraries, dates, guests, payment method tokens, billing details (no full card numbers stored).

  • Web3 Data: Wallet address, signed messages, on-chain hashes, token holdings relevant to rewards/eligibility.

  • KYC/AML (where required): Government ID, DOB, proof of address, sanctions/PEP checks.

  • Support & Communications: Messages, attachments, call recordings (where lawful).

  • Device/Telemetry: IP, user agent, device identifiers, cookies, crash logs.

  • Third-Party Data: Identity verification providers, analytics, ad networks, travel partners, and public blockchain data.

4) How We Use Data (Purposes & Legal Bases)

  • Provide, secure, and improve the Services (contract/legitimate interests).

  • Facilitate bookings, rewards, and wallet utilities (contract).

  • KYC/AML, fraud prevention, sanctions screening (legal obligation/legitimate interests).

  • Customer support and service notifications (contract/legitimate interests).

  • Personalization and analytics (consent where required/legitimate interests).

  • Marketing and attribution (consent where required/legitimate interests).

  • Legal compliance and enforcement (legal obligation/legitimate interests).

5) Sharing of Data

We share with:

  • Processors/Vendors (hosting, cloud, analytics, payments, identity verification, support tools).

  • Travel Partners/Suppliers (to confirm and service bookings).

  • Compliance Partners (KYC/AML providers, auditors).

  • Advertising/Attribution (with consent where required).

  • Corporate Transactions (subject to confidentiality).

  • Law Enforcement/Regulators (when legally required or to protect rights and safety).
    We do not “sell” Personal Data as defined by certain laws; where “sharing” for cross-context advertising is regulated (e.g., CPRA), we honor opt-out choices.

6) International Transfers

Data may be processed in other countries. Where required, we use appropriate safeguards (e.g., SCCs/IDTA). Request details at connect@stayx.net.

7) Retention

We retain data only as long as necessary for the purposes above and legal obligations. Public blockchain records are generally immutable.

8) Your Rights

Depending on your location, you may access, correct, delete, port, restrict, or object to processing; and withdraw consent.

  • EU/UK: GDPR/UK GDPR rights; you may lodge a complaint with a supervisory authority.

  • California: CPRA rights (access, delete, correct, opt-out of “sharing,” limit use of sensitive data).
    Submit requests to connect@stayx.net. We may verify your identity (and agent authority).

9) Cookies & Similar Technologies

We use cookies, local storage, pixels, and SDKs for authentication, preferences, analytics, and marketing. See our Cookie Policy for details and controls.

10) Security

We employ appropriate administrative, technical, and physical safeguards (e.g., encryption in transit, access controls, monitoring). No system is 100% secure; protect your passwords and wallet keys.

11) Children

The Services are not directed to children under 13 (or local age threshold). If you believe a child provided data, contact us.

12) Changes

We may update this Policy; material changes will be notified in the Services or by email.

13) Contact

connect@stayx.net