Legal
Privacy Policy
Version 1.0 · effective 2026-11-01 · EN
PRIVACY POLICY — Stayix
Version 1.0 · Approved by SMARTEDTECH SL (owner) · Effective 1 November 2026. The Spanish version is the legal source.
1. Controller. SMARTEDTECH SL, NIF B66970831. Privacy contact: legal@stayix.net.
2. Minimisation principle. Stayix is designed to process the minimum data possible. We build no behavioural profiles and sell no personal data.
3. Data processed and purposes.
(a) Booking data: dates, party size and chosen stay — to manage the booking (performance of contract).
(b) Confirmation email address: used once to send your booking confirmation and not stored persistently attached to a profile.
(c) Payment data: card data is processed directly by our payment provider Stripe and the Operator stores no card numbers.
(d) Analytics: only with your prior consent (consent banner). Without consent, no non-essential analytics run.
(e) Conversations with a stay's assistant: processed to answer your question from verified facts; never used for advertising.
4. Recipients. Strictly necessary processors: Stripe (payments), Supabase (database, EU), Vercel and Railway (infrastructure), Resend (transactional email), Twilio (messaging, where applicable). No transfers for advertising purposes.
5. Retention. Booking data is kept for statutory tax and contract periods. Consent records are kept as proof of compliance.
6. Rights. You may exercise access, rectification, erasure, objection, restriction and portability at legal@stayix.net. You may lodge a complaint with the AEPD (www.aepd.es).
7. Security. Encryption in transit, role-based access control, and a fail-closed principle: in doubt, the system denies access.