Legal document
Privacy Policy
How StayLayer processes customer-account data, workspace activity, and direct inquiry submissions routed through customer sites.
Version 2026-05-11 effective 2026-05-11
Data categories
StayLayer processes account identifiers such as work email, authentication records, workspace membership data, site configuration, deployment metadata, and inquiry submissions routed by customer sites.
Inquiry payloads are controlled by each customer workspace and may contain guest contact details, stay preferences, dates, and free-form messages.
Why StayLayer processes data
Data is processed to provide workspace authentication, publish customer-controlled sites, route inquiries, monitor service health, and enforce plan limits and security controls.
StayLayer does not need invented marketing metrics or testimonial data to operate the service and omits unsupported claims from the public funnel.
Sharing and subprocessors
StayLayer may use infrastructure subprocessors for hosting, email delivery, observability, or payments. Current categories are listed in the Subprocessors document.
Customer inquiry submissions are shared only with configured routing destinations, service providers required to deliver the platform, or legal authorities when required by law.
Rights and review
Data-access, correction, deletion, and portability requests follow the GDPR and Data Rights process documented in the legal hub.
This policy keeps a version history and should receive legal review before production launch.