Privacy Policy

StayHoot is operated by Chain Reaction W LLC.

Effective October 8, 2026

StayHoot helps hospitality businesses manage property information and guest communications.

We collect account and property details you provide, essential usage and security information, and—when you authorize an Instagram connection—account identifiers, messages, comments and connection credentials permitted by your permissions. We use this information to operate, support and secure StayHoot and provide authorized features.

If you choose Continue with Google, Google provides your account identifier, verified email address and basic profile information, which may include your name and profile picture. We use this information through Supabase Auth to sign you in and identify your StayHoot account. Google sign-in requests only basic identity permissions; it does not request access to your Gmail messages, Google Drive files or contacts. You can also sign in using an email code.

We share information as needed with your business workspace, connected platforms and service providers, including Vercel, Supabase, Resend, Trigger.dev and OpenAI, or for legal obligations, protection of rights or a business transfer. Providers may process data internationally; we apply legally required safeguards. Essential cookies support login, security and service operation.

Optional analytics and advertising tools are off until you choose them in Cookie settings. Analytics uses Google Analytics to measure page views, scrolling and product milestones. Advertising uses Meta Pixel and, when enabled, Conversions API to measure advertising results. These tools may receive browser identifiers and browser software details, approved campaign codes, page paths and event details such as signup, plan choice, trial activation and subscription payment amounts. Meta may use advertising data under its own policies, including for ad measurement and personalization. We do not send guest messages, property booking links, login codes, connection credentials, email addresses or phone numbers in these tracking events.

You can accept or reject optional cookies, choose analytics and advertising separately, or withdraw either choice using Cookie settings. Refusing optional cookies does not prevent you from using StayHoot. Cookie choices last up to 180 days; approved campaign codes last up to 30 days. With your permission, campaign codes are retained through sign-in and Checkout to relate product milestones to campaigns. Server advertising delivery uses your saved choice, stops after withdrawal or expiry, and does not send events from before your permission was given. Essential account and billing records are maintained independently for service operation.

We retain personal data as needed for the service and delete it from active systems within 30 days of a verified account-deletion request, except where lawful retention is necessary. Backups expire on their normal cycle. You can disconnect Instagram to stop further collection and remove local connection credentials and captured events.

We use reasonable security safeguards. Where applicable, our legal bases include contract performance, legitimate interests, legal obligations and consent. For guest data processed on a hospitality business’s instructions, that business controls its use and we act as its service provider.

Contact privacy@stayhoot.app to request access, correction, deletion or other rights available under applicable law. We may verify your identity and assist the relevant business with guest requests. You may withdraw consent or complain to a data-protection authority where applicable.

StayHoot business accounts are for adults; the service is not directed to children under 13. We use OpenAI's Responses API to generate guest replies. Requests include approved property facts, relevant conversation history and pending guest messages. We will update this notice and provide additional notice or consent where required when practices change.

Privacy contact: privacy@stayhoot.app