Legal pages

1. Purpose of the service

STAISS provides a professional interface allowing hosts to share with their travellers a Privilege Pass giving access to an interactive map of exclusive offers negotiated with local partner merchants.

2. Access and registration

Access to professional workspaces (owners, merchants) requires the creation of an account and acceptance of these Terms of Use, the Sales Terms and the Privacy Policy. STAISS reserves the right to refuse or suspend any account that does not comply with these rules.

3. Traveller use

Travellers use the exclusive offers on a strictly personal basis during their stay. Any resale, duplication or fraudulent use of a Privilege Pass or a partner code is prohibited and results in immediate suspension of access.

4. Partner merchant use

Merchants commit to honouring the active offers published on the map when a traveller presents their Privilege Pass, and to respecting STAISS brand elements (logo, interface, content).

5. Availability and liability

STAISS makes every effort to ensure an available and secure service but cannot be held liable for occasional interruptions related to maintenance operations, force majeure events or third-party service failures. Answers provided by the virtual assistant are based on generative artificial intelligence and are given for information only.

6. Subscription plans

The subscription plans are the Mensuel Liberté plan, with no commitment, and the Annual plan, with a 12-month commitment. No free trial period is offered. You may cancel the Mensuel Liberté plan at any time from your customer area; cancellation takes effect at the end of the current period, at no cost. The terms of the Annual plan are set out in the General Sales Terms and on the Pricing page.

1. Commercial model

STAISS offers a B2B subscription billed per property, on a monthly or annual basis. The service is 100% free with no commission on sales for merchant partners. Current pricing can be viewed on the pricing page.

pricing

2. Immediate billing and listing validation

For the Mensuel Liberté and Annual plans, the subscription is billed as soon as the secure Stripe payment is completed at registration. The customer links the public link of their listing (Airbnb, Booking, etc.) from their space to certify their accommodation. STAISS validates the account and has a discretionary right of refusal (unverifiable listing, doubt about compliance).

3. Payment and invoicing

Payments are processed via Stripe. An invoice is made available in the customer workspace after each billing cycle. No payment details are stored in clear text by STAISS.

4. Termination

The subscription can be cancelled at any time from the customer workspace. Cancellation takes effect at the end of the current period, without pro-rata refund.

5. Limitation of liability — intermediary status

STAISS provides exclusively a software platform for technical intermediation and local animation. STAISS disclaims any liability for the final performance, the quality or any refusal to apply an offer by a partner merchant, as well as for any dispute between a traveller and the host during the occupancy of the property.

1. Data collected

We only collect data strictly necessary for the proper functioning of the service. Hosts and merchants: first and last name, e-mail address, phone number, business or company name, postal address, public link of the property listing (Airbnb, Booking, etc.) or of the business, and the identifiers needed to process payments via Stripe. Travellers: stay session identifier and ephemeral geolocation data, used only at the time of the GPS check to validate access to offers at the merchant.

2. Purposes

This data is used exclusively to certify accommodations, generate traveller Privilege Passes, check the anti-fraud security of offers at merchants, manage B2B invoicing and send strictly operational notifications.

3. Hosting and security

Your data is stored securely on infrastructure located in the European Union (Lovable, Supabase). Access is protected by strong authentication and TLS encryption.

4. No resale

Your personal data is never sold or rented. It is only transmitted to the technical processors strictly necessary for the service: Stripe for payments, Supabase and Lovable for hosting and, for the sole functions described in section 8, the third-party services listed in that section.

5. Your rights

Under the GDPR, you have the right of access, rectification, portability, restriction, erasure and objection. To exercise these rights, write to contact@staiss.app or contact our support from your dashboard. You may also lodge a complaint with the CNIL (www.cnil.fr).

6. Retention

Your data is kept only for the time strictly necessary for the use of the service and for legal obligations (in particular accounting). Accounts inactive for more than 3 years are deleted.

7. Cookies, trackers and local storage

STAISS uses no advertising tracker and no third-party analytics or audience-measurement tool: no Google Analytics, no Meta Pixel. The site only sets technical cookies, necessary for the service to work and exempt from prior consent: staiss_guest (guest access, 14 days), staiss_admin (administration area, 7 days), staiss_owner (owner area, 30 days) and sidebar_state (remembers the side menu display, 7 days). These session cookies (staiss_guest, staiss_admin, staiss_owner) are signed and httpOnly, so JavaScript cannot read them; sidebar_state is an interface cookie readable by the browser that only stores the menu display state. Your browser also keeps in its local storage: a device identifier (staiss:deviceId) to limit the number of devices per property, your login session for professional spaces, your language choice and, if you stored it on the login page, the e-mail address remembered there.

8. Third-party services and data flows

Some features call third-party services that receive technical data from your browser, including your IP address: Stripe, the payment provider, whose script loads on the home and pricing pages and in logged-in spaces, and which may set its own technical fraud-prevention cookies; OpenStreetMap, whose servers supply the map tiles, and the Nominatim geocoding service when you search for an address; Google Fonts, loaded on all pages to display fonts. The support chatbot sends the messages you type to an artificial intelligence provider, through Lovable's AI gateway. Syncing a merchant listing from a Google Maps link queries Google Places. These services apply their own privacy policies.