Privacy Policy

This Privacy Policy explains how Stay Calendar ("we", "us", "the Service") collects, uses, and protects information when you use our short-term-rental calendar and housekeeper-coordination application at calendar.novacancyhosts.com.

Information we collect

• Account information: the email address and password you use to create an operator account.
• Property and calendar data: property names, addresses, and the iCal feed URLs you connect, along with the booking data those feeds return (dates and availability).
• Housekeeper share information: labels and mobile phone numbers associated with view-only share links, and the SMS consent recorded by the recipient of those links.
• Payment information: subscription billing is handled by Stripe. We do not store your full card details; Stripe processes and stores them under its own privacy and security standards.
• Usage information: basic technical data such as log entries needed to operate and secure the Service.

How we use information

• To provide the calendar, share links, and housekeeper coordination features you request.
• To send SMS booking alerts to recipients who have explicitly opted in.
• To process subscriptions and manage billing.
• To maintain the security, reliability, and integrity of the Service.

SMS / text-message alerts

Text-message alerts are strictly opt-in. A housekeeper or other recipient receives texts only after they personally confirm consent on their own share page, including agreeing to consent language and acknowledging that message and data rates may apply. Recipients can opt out at any time by replying STOP to any message, or by withdrawing consent on their share page. Replying HELP provides assistance. We do not use phone numbers for marketing.

We will never share or sell mobile opt-in data or phone numbers with third parties or affiliates for marketing or promotional purposes at any time. Numbers are disclosed only to Twilio to deliver the messages you opted in to receive.

Service providers

We rely on the following processors to operate the Service. Each processes data only as needed to provide their function:

• Supabase — database, authentication, and hosting of account and calendar data.
• Netlify — application hosting and serverless functions.
• Stripe — subscription payment processing.
• Twilio — delivery of SMS text alerts.
• Resend — delivery of transactional email (such as sign-up confirmations).
• OwnerRez — the source of the booking feeds you choose to connect (data flows from your OwnerRez account to us via the iCal URL you provide).

Data retention

We keep your information for as long as your account is active. You can delete properties, share links, and other data at any time, and you can request deletion of your account by contacting us. Revoked share links and deleted properties are removed from active use, and associated data is deleted in the normal course of operation.

Your choices

• Access, correct, or delete your property and share data from within the app.
• Opt out of SMS at any time (reply STOP, or withdraw consent on the share page).
• Cancel your subscription from the billing portal.
• Contact us to request account deletion.

Security

We use industry-standard measures, including access controls and row-level security, so that each operator can access only their own data. No method of transmission or storage is perfectly secure, but we work to protect your information.

Children

The Service is intended for business use by adults and is not directed to children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy or your data can be sent to listing@novacancyhosts.com.