Legal
Privacy Policy
Last updated: March 8, 2026
1. Who We Are
Instay ("we", "us", "our") operates the platform at instay.live — a guest feedback management tool for hotels. This policy explains what data we collect, why, and how we protect it.
For any privacy concerns, contact us at hello@instay.live.
2. Data We Collect
Account data: Name, email address, and hotel information you provide when signing up.
Guest feedback data: Feedback submitted through your hotel's forms — including room numbers, messages, and ratings. This data belongs to you (the hotel operator).
Usage data: Pages visited, features used, and session information, collected automatically to improve the product.
Payment data: Handled entirely by Stripe. We never store card numbers or payment credentials.
3. How We Use Your Data
- Provide and operate the Instay platform
- Send transactional emails (feedback alerts, account notices)
- Process payments via Stripe
- Improve product features and fix bugs
- Respond to support requests
We do not sell your data or your guests' data to third parties. Ever.
4. Data Storage & Security
Data is stored on secure servers (Supabase / PostgreSQL) with encryption at rest and in transit. Access is restricted to authorised personnel only.
We use industry-standard security practices including HTTPS, hashed passwords, and session token expiry.
5. Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Stripe — payment processing
- Resend — transactional email delivery
- Vercel — frontend hosting
- Supabase — database hosting
- Vercel Analytics — anonymous usage analytics
6. Cookies
We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking cookies.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your data
To exercise any of these rights, email hello@instay.live.
8. Data Retention
We retain your account data for as long as your account is active. If you cancel, your data is deleted within 90 days unless required by law to retain it longer.
9. Changes to This Policy
We may update this policy periodically. When we do, we'll update the date at the top of this page. Continued use of Instay after changes constitutes acceptance.
10. Contact
Questions about this policy? Email us at hello@instay.live.