Privacy policy

Scope

This policy describes how StaySphere handles information when you use the website, create an account, manage a listing, save a listing, or submit or respond to an inquiry.

Information we collect

We collect the information you provide directly to us: your name, email address, account role, password, listing details, listing photos, saved listings, inquiry messages, and inquiry status updates. Passwords are stored as hashes, not as readable passwords.

We also process session identifiers and limited operational records, such as sign-in, registration, email-delivery, and error events, to operate and secure the service.

How we use information

We use information to create and secure accounts, authenticate users, display and manage listings, route inquiries between renters and landlords, maintain saved listings, provide email verification and password-reset flows, and send inquiry notifications when email delivery is enabled. We also use it to investigate misuse, maintain the service, and comply with applicable legal obligations.

Cookies and local storage

We use an HTTP-only session cookie to keep you signed in. The session is configured to expire after seven days, and signing out invalidates the stored session. If you select “Remember email” on the sign-in form, your email address is stored in your browser’s local storage until you remove it, turn off that option, or clear browser data.

Storage and service providers

Account, listing, favorite, and inquiry data are stored in the application database. Listing photos may be optimized and stored in object storage. When enabled, email verification, password-reset, and inquiry notifications are sent through the configured email provider. Hosting, database, object-storage, and email providers process information only as needed to provide their services.

Sharing information

Listing and inquiry information is shared with the users involved in the relevant rental interaction, such as a renter and the listing landlord. Authorized platform administrators may access information to operate, moderate, secure, and support the service. We may also disclose information to service providers or when required to comply with applicable law or protect the service, users, or others from harm.

Retention

Verification and password-reset codes are stored as hashes and expire after one hour. Soft-deleted listings are scheduled for permanent removal after 30 days. Other information is retained while needed to operate the service, resolve disputes, meet legal obligations, or enforce these terms.

Your choices and requests

You can update listing information through the applicable dashboard and clear remembered email data in your browser. The service does not currently provide self-service account deletion. To request access to, correction of, or deletion of personal information, contact the StaySphere service administrator using the contact details provided by the operator of the service.

Policy updates

We may update this policy when our practices or the service changes. The current version and its effective date are published on this page. For questions about this policy, contact the StaySphere service administrator using the contact details provided by the operator of the service.