Privacy Policy

Last updated: April 2026

What we collect

  • Listing data — Airbnb listing URL, title, description, photos, nightly rate, reviews, and host display name. Either scraped from public Airbnb pages (cold-outreach side) or submitted by you directly (self-serve side).
  • Host contact — when we identify a host email through public sources (description, business website, or short-term rental permit registries), we record it for outreach.
  • Customer data — email and payment metadata when you place an order through Stripe.
  • Email engagement — opens, clicks, replies, bounces, and unsubscribe actions tied to messages we send you.
  • Usage analytics — aggregated, non-identifying page views collected via PostHog.

How we use it

  • Generate AI-edited previews and deliver paid orders.
  • Send transactional and marketing emails about Restay.
  • Improve our pipeline and detect fraud or abuse.

Subprocessors

We share data with the following subprocessors strictly to operate the service:

  • Vercel — hosting
  • Supabase — database
  • Stripe — payments
  • Resend — email delivery
  • Cloudflare R2 — image storage
  • Anthropic — copy rewriting + reply triage (Claude)
  • fal.ai — photo edit generation (Flux Kontext)
  • OpenAI — photo quality-control vision scoring (GPT-4o-mini)
  • Apify — Airbnb listing scraping
  • Hunter.io — host email enrichment from public domain data
  • PostHog — analytics
  • Inngest — workflow orchestration
  • Clerk — admin auth (Restay operators only)

Retention

  • Source photos: deleted 30 days after delivery
  • Edited photos: retained for the life of your account so you can re-download
  • Email engagement records: retained for 24 months for deliverability analysis

Your choices

  • Unsubscribe — every email we send includes a one-click unsubscribe link. Once you unsubscribe we won't email you again about your listings.
  • Deletion — email hello@restay.agency from the address on file to request deletion of all data associated with you or your listings. We delete within 30 days.
  • California / GDPR rights — California residents and EU residents have the right to access, correct, or delete personal data we hold about them. Use the contact email above and we will respond within 30 days. (Note: we do not currently send cold outreach to EU residents — see Markets, below.)

Markets

Cold outreach (un-solicited email to hosts whose listings we identified through public Airbnb pages) is currently sent only to US-based hosts. EU and Canadian hosts are excluded at the discovery layer until our GDPR / CASL framework is extended.

Contact

hello@restay.agency
3500 South Dupont Highway, Dover, DE 19901