Draft — have counsel review before launch.
From hosts: account and billing details. From guests, on behalf of hosts: name, email, optional mobile, device identifiers (MAC address, IP), sign-in times, and consent choices with the exact wording shown.
To provide WiFi access, to let hosts contact guests who opted in, to match stays to reservations, and to keep networks safe. Hosts are the data controllers for guest data; SignInStay processes it on their behalf.
Data is stored on servers in Toronto, Canada. Email is delivered through Resend; payments are processed by Stripe, who receive the host's billing details only.
Every marketing email carries a one-click unsubscribe. Guests may request access or deletion at hello@signinstay.com. We honour CASL, PIPEDA, Quebec Law 25, CAN-SPAM and GDPR requests.
Session and device logs: 12 months. Contacts and consent records: until the host deletes them or closes their account.