Privacy Policy

STAYOS (“we”, “us”) is committed to protecting your personal data in accordance with EU Regulation 2016/679 (GDPR). This policy explains what data we collect, why we collect it, how long we keep it, and the rights you have over your information.

1.Who we are

STAYOS is a digital guest-experience platform for hotels. We provide hotels with a QR-based guest app, online check-in, in-app messaging, and a management dashboard. For any question about this policy or your personal data, contact us at hello@stayoshotel.com.

2.What data we collect

• Hotel accounts: name, email address, password (stored hashed, never in plain text), and hotel details.
• Guest check-in: name, email, phone, passport number, nationality, and arrival details — collected only for legal compliance purposes.
• Usage data: QR scan logs and session data.

3.Why we collect it (legal basis)

• Hotel accounts: performance of our contract with the hotel.
• Guest passport data: compliance with a legal obligation under Greek hotel registration law.
• Usage data: our legitimate interest in operating, securing, and improving the service.

4.How long we keep it

• Guest passport and check-in data: automatically deleted after 7 days.
• Hotel account data: retained while the account is active.
• QR scan logs: 90 days.

5.Who has access

• The STAYOS team — currently the founder only, at this stage.
• Stripe, for payment processing — see stripe.com/privacy.
• Google, for transactional email delivery via SMTP.
• Hostinger, our hosting provider — data is stored on EU-based servers.

6.Your rights under the GDPR

You have the right to access, correct, delete, and port your personal data, and the right to object to processing. To exercise any of these rights, email hello@stayoshotel.com.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr.

7.Cookies

We use session cookies for authentication only. We do not use tracking or advertising cookies.

8.Changes to this policy

We will notify users of any material changes to this policy by email.