Privacy Policy

The short version

This summary is for convenience only and is not a substitute for the full policy below. If there is any conflict, the full policy governs.

• This policy covers both Hosts (who buy StayReel for a property) and Guests (who use the Guest Page).
• We collect what we need to photograph a property, build and host its Guest Page, take payment, and show how the page is used.
• From Guests we collect mostly anonymous usage data, plus the reels and photos they make.
• We don’t sell personal information, and we never auto-post to anyone’s social accounts.
• Guest reels and photos are only re-shared by a Host with that guest’s permission. StayReel only uses Guest Content in its own marketing with a separate, explicit permission.
• To ask to access, correct or delete your information, email hello@stayreel.xyz.

1. About this policy

1.1 Who we are. StayReel (“StayReel”, “we”, “us”, “our”) is responsible for the personal information handled under this policy.

1.2 Who and what this covers. This policy applies to our websites, the Host onboarding and dashboard, and the guest-facing marked photo spots, capture flow and reel (the “Guest Page”). “Host” means a person or business that buys the service for a property; “Guest” means a person who uses the Guest Page. It works alongside our Host Terms of Service and the Guest Notice.

1.3 Key terms. “Property Content” means the photos, drone clips and footage we capture of a property. “Guest Content” means the photos, videos and reels a Guest creates using the Guest Page.

2. Information we collect

2.1 From Hosts. Name and business details; email and phone; the property name, address and access information (for example entry method and codes); social handles (such as Instagram); the details you give us at onboarding; billing information (card payments are processed by our payment provider, Stripe; we don’t store full card numbers); and any backup-contact details you choose to share (for example a cleaner or co-host).

2.2 From Guests. Mostly anonymous usage and event data from the Guest Page, such as scans, spots viewed, reels made, saves and opens; general device and browser information; the Guest Content you create (which may include images of you or other people); and, if you contact us or ask us to act on your sharing permission, your name and contact details.

2.3 Location. To show the right golden-hour and sunset times, the Guest Page uses the Property’s location and the date. If a feature uses your device’s location (for example a “you are here” dot), it asks your permission first and you can decline.

2.4 Automatically. Like most websites, we and our providers may use cookies and similar technologies, and collect information such as IP address and device data, for security, basic analytics and to make the service work. See section 12 and our Cookie Notice.

3. How we use information

We use personal information to:

• photograph a property and produce, host and update its Guest Page, marked photo spots and reels;
• generate a Guest’s reel and let them save or share it;
• provide Hosts with analytics and reports (the guest figures we show Hosts are aggregated and anonymous);
• take payment, manage subscriptions and provide support;
• operate, improve and promote the service, including using Property Content in our own marketing (Hosts can opt out); we use Guest Content in our marketing only where the Guest has given a separate, explicit marketing permission;
• keep the service secure and meet legal obligations.

4. Guest Content and consent

Guests own the reels and photos they create. Guest Content is only re-used by a Host where the Guest has agreed to let that Property re-share it. StayReel only uses Guest Content in its own marketing with a separate, explicit marketing permission. Guests can withdraw either permission at any time by emailing hello@stayreel.xyz; we will stop new uses within a reasonable time, though content already shared may not be recallable. We do not auto-post to anyone’s personal account. This mirrors our Host Terms of Service and the Guest Notice.

5. When we share information

We do not sell personal information. We share it only as needed:

• Service providers who help us run the service, under contract, for example payment processing (Stripe), our video-rendering provider, and our hosting, database, analytics and email providers.
• The Host, for their property: aggregated, anonymous guest statistics, and any Guest Content a Guest has given permission to share.
• Legal and safety reasons, where we must comply with the law, enforce our terms, or protect people’s rights and safety.
• Business transfers, if our business is sold or reorganised, information may transfer with it, subject to this policy.

6. Sending information overseas

Some of our providers are based outside your country (for example in the United States). Where we transfer personal information overseas, we take reasonable steps to ensure it is handled with comparable protection, consistent with New Zealand IPP 12, Australian APP 8, and applicable United States requirements.

7. How long we keep it

We keep Host information for as long as we provide the service and as needed afterwards for legal, tax and record-keeping purposes. We keep mostly anonymous Guest usage data for as long as it is useful for analytics and then delete or de-identify it. We keep Guest Content for as long as needed to provide the service and, where permission has been given, for the agreed re-use. We delete or de-identify information when it is no longer needed, or on request where we are able to.

8. How we protect it

We use reasonable technical and organisational safeguards to protect personal information, and we handle access details (such as lockbox or alarm codes) with particular care and use them only to deliver the service. No method of storage or transmission is completely secure, but we work to protect your information and to respond appropriately if something goes wrong.

9. Your choices and rights

9.1 Access and correction. You can ask to access or correct the personal information we hold about you. We will respond as required by law.

9.2 Other rights. Depending on where you are, you may have further rights. See the Regional Annex (for example, deletion and opt-out rights in the United States, and the Australian Privacy Principles). To exercise any right, email hello@stayreel.xyz.

9.3 Complaints. If you have a concern, contact us first and we’ll try to put it right. You can also complain to your privacy regulator, the Office of the Privacy Commissioner (New Zealand), the OAIC (Australia), or your state authority (United States).

10. Children

The service is intended for adults (18+). It is not directed to children, and we do not knowingly collect personal information from children. Hosts and Guests are responsible for not capturing or sharing images of children without the right to do so, including any parent or guardian permission. If you believe a child has given us personal information, contact us and we will delete it.

11. No guarantee of results

Separate from privacy: as set out in our Host Terms of Service, we provide content and tools and do not guarantee bookings, occupancy, reach or social-media results.

12. Cookies and analytics

We keep cookies and tracking to a minimum, mainly what makes the site work and basic, privacy-respecting analytics. You can control cookies through your browser settings, and our Cookie Notice explains more.

13. Changes to this policy

We may update this policy from time to time. We’ll post the updated version with a new date, and where a change is significant we’ll give reasonable notice.

14. How to contact us

Questions about privacy, or want to exercise a right? Email hello@stayreel.xyz.

Regional Annex

These location-specific terms apply to people based in the relevant country or state and prevail over the main body where they conflict, for those people.

Annex A: New Zealand

• We comply with the Privacy Act 2020 and its Information Privacy Principles, including the IPP 3A indirect-collection notification requirements applying from 1 May 2026.
• You may ask the Office of the Privacy Commissioner to investigate a privacy complaint if we cannot resolve it with you.

Annex B: Australia

• We handle personal information in line with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles, including the reforms in the Privacy and Other Legislation Amendment Act 2024 and the statutory tort for serious invasions of privacy in force from 10 June 2025.
• You may complain to the Office of the Australian Information Commissioner (OAIC).

Annex C: United States

• Where they apply, we comply with United States state privacy laws, including the California Consumer Privacy Act / CPRA and comparable laws in other states, and with Section 5 of the FTC Act regarding unfair or deceptive practices.
• Subject to those laws, you may have rights to know, access, correct and delete personal information. We do not sell personal information, and we do not share it for cross-context behavioural advertising, so no opt-out of “sale” or “sharing” is required. We will not discriminate against you for exercising your rights.