Privacy policy
Version 2026-09-29.1
Who handles the data
The provider of Stayfig handles account, product and subscription data. Contact support@stayfig.com or write to Vasagatan 15B, 411 24 Gothenburg, Sweden, for privacy questions or to exercise your rights. Hosts decide what guest information to request for their accommodation; Stayfig processes those requests to provide the service.
What we use
We process account email and sign-in records; listing content, photos and calendar links; booking request contact details, dates and messages; subscription company details, VAT number, invoice and payment status; and technical data needed for security and service operation. Stripe handles card details; Stayfig does not receive full card numbers.
Optional analytics and ad measurement
If you accept, we use PostHog in its EU region to understand visits, clicks, setup steps and paid subscriptions, with masked session replays. We also use a Google Ads tag to attribute paid subscriptions to ads; it may set advertising cookies and process technical and click data. We send only a paid invoice ID, amount and currency for a conversion, never card or booking details. Input values, page text, element attributes, private URL queries and fragments are excluded or masked before PostHog capture. We retain only selected campaign labels (source, medium and campaign), without personal details. A PostHog cookie (name beginning ph_) lasts up to 30 days; browser storage connects visits and remembers your choice. Signed-in hosts are linked to their account ID in PostHog. You can reject or withdraw consent using the Privacy button. Neither optional tag starts before you accept.
Why and with whom
We use this information to provide pages, booking requests, calendars, customer support, billing, security and legally required records, and to improve Stayfig and measure ads when you consent. The legal bases include providing the service, legitimate interests in security and support, consent for optional measurement, and legal duties such as accounting. Service providers include Supabase for database/authentication/storage, Vercel for hosting, Resend for email, Stripe for payments and invoices, PostHog for product analytics, and Google for ad measurement. Guests’ requests are shared with the relevant host. We do not sell personal data.
How we protect it
We use authenticated access, database access rules, encrypted connections and restricted server credentials. No online service can guarantee absolute security. Please contact support@stayfig.com if you believe your information has been exposed.
Retention, rights and contact
We keep information while needed to run the account or handle a request, and retain records longer where law or an unresolved dispute requires it. Deleting a listing or account removes associated service data subject to those exceptions. You may request access, correction, deletion, restriction, objection or portability where applicable, and complain to the Swedish privacy authority IMY. Email support@stayfig.com. The host is also the contact for guest data about a particular stay.