Privacy Notice

1. Who is responsible for your data

Staylo is operated by Petros Manoli ("Staylo", "we", "us"), trading as Tikay Property Management. We are the data controller for the personal data described in this notice — we decide how and why it is processed. You can reach us at tikayholidays@gmail.com.

2. Whose data this covers

This notice covers two groups: hosts (people who create Staylo accounts and assistants) and guests (people who chat with an assistant through a host's shared link). If you are a guest, the host you are messaging is also a controller of your conversation — Staylo processes it on the host's behalf to run the assistant.

3. What data we collect and why

• Account data — your name (if given), email address and login credentials. Used to create and secure your account and to contact you about the service. Legal basis: contract performance.
• Billing data — plan, subscription status and payment references. Payments themselves are handled by Paddle.com as Merchant of Record; we receive subscription records to activate your plan. Legal basis: contract performance.
• Knowledge content — the text, documents and web-page content you feed an assistant, which may contain personal data about you or your property. Used solely to answer guest questions for your assistants. Legal basis: contract performance.
• Conversation data — guests' questions, booking names (if the guest chooses to give one), and the assistant's answers, stored in a log visible to the host. Used to provide the service, let hosts improve their assistants, and detect abuse. Legal basis: contract performance and legitimate interests.
• Technical data — IP address, device and browser information, and usage telemetry. Used to keep the service secure, prevent fraud and improve the product. Legal basis: legitimate interests.
• Support and service messages — emails you send us. Used to help you. Legal basis: contract performance.

4. Who we share data with

• Service providers (subprocessors) — hosting, database, AI and analytics providers that help us run Staylo, bound by contracts to process data only on our instructions.
• Paddle.com — our reseller and Merchant of Record, which processes payments, manages subscriptions, handles tax compliance and issues invoices and refunds.
• AI providers — guest questions and relevant assistant knowledge are sent to AI models to generate answers.
• Professional advisers — lawyers and accountants, where needed.
• Authorities — where required by law or to protect rights and safety.

We never sell personal data.

5. How long we keep data

• Account and billing records: for the life of your account, plus any period we must keep them by law (for example tax rules).
• Knowledge content and conversation logs: while your assistants are active, and for up to 30 days after your plan ends, after which they are deleted or anonymised.
• Technical and security data: for as long as needed to keep the service safe, typically no longer than 12 months.

When data is no longer needed, we delete it or anonymise it so it no longer identifies anyone.

6. Your rights

You have the right to: access the personal data we hold about you; have incorrect data corrected; have your data erased; restrict or object to processing; data portability; withdraw consent where processing is based on consent; and complain to your local data protection authority. We respond to requests within one month. Email us at tikayholidays@gmail.com to exercise any of these rights. If you are a guest, note that your host controls the conversation log — for removal of a conversation, contact the host you messaged.

7. International transfers

Data may be processed outside the UK and EEA, including by our hosting and AI providers. Where that happens, we rely on safeguards such as the European Commission's standard contractual clauses or an adequacy decision to protect your data.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and limiting access to data to people and systems that need it.

9. Cookies

Staylo uses only essential cookies and equivalent local storage — to keep you signed in and remember small preferences such as a guest's booking name on their own device. We do not use advertising or marketing cookies, and we do not run third-party advertising trackers. Because the cookies we use are strictly necessary, no cookie consent banner is required. If this ever changes, we will update this notice and ask for your choices before non-essential cookies are set.

10. Changes to this notice

We may update this notice as the service evolves. Significant changes will be announced in the app or by email. This version applies from 30 September 2026.