This Privacy Policy explains how DirectStay LLC ("DirectStay," "we," "us"), a Wyoming limited liability company, collects, uses, and shares personal information when you use the DirectStay platform, website, and related services (the "Services") whether as a guest, a host, or a visitor. By using the Services, you agree to this Policy.
1.Information We Collect
- Account and profile information: name, email, phone number, password, and, for hosts, business and payout details (including legal entity name and tax identification information required for verification and payouts).
- Identity verification information: where verification is required, a government-issued ID and a live selfie, processed by our identity verification provider, together with the verification result. Biometric information derived from the selfie is processed by the verification provider to match you to your ID and is handled under its own privacy notice and our contracts with it.
- Booking and stay information: properties viewed and booked, dates, guest counts, pricing, fees and taxes, cancellation and modification history, and communications between guests and hosts on the platform.
- Payment information: handled by our licensed payment processors. We receive confirmation, payment method type, and limited details (such as last four digits); we do not store full card numbers on our systems.
- Device and usage information: IP address, device and browser data, pages viewed, actions taken, and approximate location derived from IP, collected automatically.
- Support communications: messages, emails, and support tickets, including through our support tooling.
2.How We Use Information
- To operate the Services: create accounts, display listings, process bookings, holds, modifications, cancellations, refunds, and payouts, and enable host-guest communication;
- To verify identity and protect the platform: fraud detection, trust screening of accounts, listings, bookings, and payments, and enforcement of our Terms;
- To calculate, collect, and remit applicable lodging and occupancy taxes, and to maintain the records those obligations require;
- To personalize the Services, such as tailoring search results and recommendations;
- To communicate with you about bookings, account activity, security, and - with your consent where required - marketing;
- To comply with law, respond to lawful requests, and establish or defend legal claims.
3.Automated Screening and Decisions
- We use automated processing, alongside human review, to screen for fraud, misrepresentation, and platform abuse, and to verify identity. Automated screening can result in a booking, listing, or account being declined, conditioned, or suspended. Where applicable law grants you rights regarding automated decision-making, you may contact us to request information about a decision or human review of it.
5.Statutory Categories
| Category | Examples | Purpose | Sold / Shared |
|---|---|---|---|
| Identifiers | Name, email, phone, address, IP, account ID | Accounts, bookings, security, support | No |
| Government identifiers | ID document data (via verification provider); host tax IDs | Identity and entity verification; tax compliance | No |
| Biometric information | Selfie-to-ID matching (processed by verification provider) | Identity verification only | No |
| Commercial information | Bookings, payments, refunds, payouts | Provide the Services; taxes; records | No |
| Internet/electronic activity | Usage, device, and log data | Operate, secure, and improve the Services | No |
| Geolocation (approximate) | General location from IP | Security, fraud prevention, localization | No |
| Inferences (limited) | Preferences used to personalize results | Personalization and improvement | No |
| Sensitive personal information | Log-in credentials; ID and biometric data above | Authentication and verification only | No |
6.Sensitive Information
- We collect sensitive personal information only for authentication and identity/entity verification, use it only for those purposes and as permitted by law, and do not use it to infer characteristics about you. Verification documents and biometric data are processed by our verification provider under strict contractual limits and retained only as long as needed for verification, fraud prevention, and legal compliance.
8.Retention
- We and our providers use cookies and similar technologies to keep you signed in, remember settings, measure performance, and understand usage. You can control cookies through your browser and any controls we offer. We honor the Global Privacy Control (GPC) and similar opt-out signals where required by law. If we later adopt advertising technologies that constitute a "sale" or "sharing" under applicable law, we will update this Policy and provide an opt-out first.
9.Your U.S. State Privacy Rights
- Depending on your state, you may have the right to know/access, correct, delete, and port your personal information; to opt out of sale, sharing/targeted advertising, and certain profiling (we do not sell or share); to limit use of sensitive personal information; and to non-discrimination for exercising your rights. To exercise rights, contact us using the details below; we will verify your identity and respond within the time the law requires. You may use an authorized agent, and if we decline a request you may appeal by replying to our decision.
10.Data Location
- We are based in and process personal information in the United States. If you access the Services from outside the United States, your information will be processed in the United States.
11.Security
- We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and least-privilege practices. If we become aware of a security breach affecting your personal information, we will notify you as required by law without undue delay. No system is completely secure.
12.Children
- The Services are intended for adults 18 or older. We do not knowingly collect personal information from children. Guests may include minors in their party; the booking adult is responsible for their party's information.
13.Changes to This Policy
- The Services are intended for adults 18 or older. We do not knowingly collect personal information from children. Guests may include minors in their party; the booking adult is responsible for their party's information.
14.Contact
- This Policy should be read together with our Terms of Service.
DirectStay LLC
Attn: PrivacyWyoming, USAEmail: [email protected]