Legal pages
Last updated: August 21, 2026.
Privacy Policy (GDPR)
STAISS is committed to protecting your personal data and processing it in strict compliance with the General Data Protection Regulation (GDPR).
1. Data collected
We only collect data necessary for the proper functioning of the service: email address, phone number, first and last name, company name, public link of your listing (Airbnb, Booking, etc.) as well as information strictly necessary for processing payments via Stripe.
2. Purposes
This data is used to: create and manage your account, validate your property, allow you to use the platform, invoice you and send you strictly operational information.
3. Hosting and security
Your data is stored securely on infrastructure located in the European Union (Lovable, Supabase). Access is protected by strong authentication and TLS encryption.
4. No resale
Your personal data is never sold or rented. It is only transmitted to the technical processors strictly necessary for the service: Stripe for payments, Supabase and Lovable for hosting and, for the sole functions described in section 8, the third-party services listed in that section.
5. Your rights
Under the GDPR, you have the right of access, rectification, portability, restriction, erasure and objection. To exercise these rights, write to contact@staiss.app or contact our support from your dashboard. You may also lodge a complaint with the CNIL (www.cnil.fr).
6. Retention
Your data is kept only for the time strictly necessary for the use of the service and for legal obligations (in particular accounting). Accounts inactive for more than 3 years are deleted.
7. Cookies, trackers and local storage
STAISS uses no advertising tracker and no third-party analytics or audience-measurement tool: no Google Analytics, no Meta Pixel. The site only sets technical cookies, necessary for the service to work and exempt from prior consent: staiss_guest (guest access, 14 days), staiss_admin (administration area, 7 days), staiss_owner (owner area, 30 days) and sidebar_state (remembers the side menu display, 7 days). These session cookies (staiss_guest, staiss_admin, staiss_owner) are signed and httpOnly, so JavaScript cannot read them; sidebar_state is an interface cookie readable by the browser that only stores the menu display state. Your browser also keeps in its local storage: a device identifier (staiss:deviceId) to limit the number of devices per property, your login session for professional spaces, your language choice and, if you stored it on the login page, the e-mail address remembered there.
8. Third-party services and data flows
Some features call third-party services that receive technical data from your browser, including your IP address: Stripe, the payment provider, whose script loads on the home and pricing pages and in logged-in spaces, and which may set its own technical fraud-prevention cookies; OpenStreetMap, whose servers supply the map tiles, and the Nominatim geocoding service when you search for an address; Google Fonts, loaded on all pages to display fonts; api.qrserver.com, which generates QR codes from the Pass public link when you display or download them. These services apply their own privacy policies.