Privacy Policy

[COMPANY NAME — to be completed in Admin → Content → Legal Info] ([REGISTERED ADDRESS]) is the data controller for personal data collected through the Staypooling website and app. For any privacy question, contact us at legal@staypooling.com.

• Account data: name, email, password (encrypted), date of birth, nationality, country/city of residence.
• Profile data (optional): bio, interests, travel style, avatar, linked social accounts and their visibility settings.
• Booking data: stay and room selected, guest count, à la carte services, special requests.
• Payment data: processed directly by Stripe — Staypooling does not store full card numbers.
• Communications: messages in stay group chats, support requests, co-traveler reviews and reports.
• Technical data: device/browser information, IP address, and usage data for security and analytics.

• To perform your booking (contract): confirming rooms, processing payment, coordinating with your concierge.
• To run the community features (contract/legitimate interest): group chat, co-traveler connections, double-blind reviews.
• For safety & trust (legitimate interest/legal obligation): verifying accounts, handling incident reports.
• To communicate with you (contract/consent): booking confirmations, notifications, and — where you've opted in — marketing emails.
• To improve the Platform (legitimate interest): aggregated, non-identifying usage analysis.

We share data only as needed to run the service:

• The villa owner and concierge assigned to your stay, and — where you choose to be visible — your co-travelers.
• Stripe, for payment processing.
• Brevo, for transactional and notification emails.
• Google Maps, to show villa locations.
• Authorities, where required by law or to protect the safety of our community.

We do not sell your personal data to third parties.

Some of our service providers may process data outside your country of residence. Where this involves a transfer outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

Account data is kept for as long as your account is active, plus a limited period afterward for legal, accounting, and dispute-resolution purposes. Booking records are kept as required by applicable accounting and tax rules.

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Request deletion of your data;
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact legal@staypooling.com. If you're not satisfied with our response, you can lodge a complaint with your local data protection authority (in France, the CNIL).

We use industry-standard measures (encryption in transit, access controls, secure password storage) to protect your data. No system is perfectly secure, and we encourage you to use a strong, unique password.

The Platform uses cookies for authentication and, where enabled, analytics. See our Cookie Policy for details and how to manage your preferences.

The Platform is not directed at, and should not be used by, anyone under 18 years old.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Platform.