TidyStay LLC ("TidyStay," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the TidyStay platform, including our website, applications, and all related services (collectively, the "Service").
By using the Service, you agree to the practices described in this Policy. If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please see Section 12 for additional rights and information specific to you.
1. Information We Collect
1.1 Information You Provide
Account Information. When you create an account, we collect your name, email address, and password. Passwords are stored using industry-standard encryption and are never stored in plain text.
Property and Booking Data. When you connect calendar feeds from platforms such as Airbnb, Vrbo, Booking.com, or a property management system, we collect booking-related information available through those integrations, including check-in and check-out dates, booking status, and property identifiers. We do not collect guest payment information through calendar feeds.
Cleaner Information (Coordination Tool). When you add cleaners to the coordination tool, we collect their name, phone number, and any optional notes you provide. You represent and warrant that you have obtained appropriate consent from each cleaner before providing their personal information to TidyStay.
Marketplace Profile Information. (The Marketplace is not yet available. This section will apply when marketplace features are launched.) If you create a marketplace cleaner account, we collect your display name, profile photo, bio, hourly rate, service area (zip codes or radius), availability preferences, and optional portfolio photos.
Payment Information. Payment information (such as credit card details and bank account information) is collected and processed by our payment processor, Stripe. TidyStay does not directly store your full payment card numbers or bank account details. Please refer to Stripe's Privacy Policy for information on how Stripe handles your payment data.
Communications. If you contact us for support, send feedback, or use our in-platform messaging system, we collect the content of those communications.
1.2 Information Collected Automatically
When you use the Service, we automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URLs, pages visited and actions taken within the Service, date and time of access, and general location data derived from your IP address. We collect this information using cookies, log files, and similar technologies (see Section 10).
1.3 Information from Third Parties
We may receive information from third-party services you connect to TidyStay, such as booking platforms (via iCal or API), property management systems, and Stripe (payment status and identity verification results). We only collect information necessary to provide the Service.
2. How We Use Your Information
We use your information for the following purposes:
To provide and operate the Service, including syncing calendar feeds, generating turnover events, sending SMS and email notifications, processing payments, and facilitating marketplace connections between hosts and cleaners.
To communicate with you, including sending service-related notifications, responding to support requests, and providing account updates.
To improve the Service, including analyzing usage patterns, diagnosing technical issues, and developing new features.
To protect the Service and our users, including detecting and preventing fraud, abuse, and security incidents, and enforcing our Terms of Service.
To comply with legal obligations, including responding to lawful requests from public authorities and meeting tax reporting requirements.
We do not sell your personal information. We do not use your personal information for targeted advertising.
3. SMS and Email Communications
Transactional Messages. We send SMS and email messages as part of the Service's core functionality, including turnover notifications, job alerts, magic link authentication, payment confirmations, and account updates. These messages are necessary to provide the Service and cannot be opted out of while using the Service.
SMS Delivery. SMS messages are delivered through our third-party messaging provider (currently Twilio). Phone numbers are processed solely to deliver notifications. We do not use cleaner phone numbers for marketing purposes.
Your Consent Obligations. If you are a host adding your own cleaners to the coordination tool, you are responsible for obtaining proper consent from each cleaner to receive automated SMS messages through TidyStay before providing their phone number.
4. How We Share Your Information
We share your information only in the following circumstances:
Service Providers. We share information with trusted third-party service providers who process data on our behalf under contractual obligations to protect your data. These include Stripe for payment processing, Twilio for SMS delivery, Resend for email delivery, Vercel for hosting infrastructure, Neon for database hosting, Sanity for content management, and analytics providers. These providers are authorized to use your information only as necessary to provide services to us.
Between Marketplace Users. (Applies when marketplace features are available.) When you participate in the marketplace, certain information is shared between hosts and cleaners as necessary to facilitate the service. Hosts can see cleaner profiles, ratings, and reviews. Cleaners can see property details for properties marked as open to the marketplace. Messages sent through the platform are visible to conversation participants.
Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of TidyStay, our users, or the public.
Business Transfers. If TidyStay is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
With Your Consent. We may share your information for other purposes with your explicit consent.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We also retain information as necessary to comply with legal obligations (e.g., tax records), resolve disputes, enforce our agreements, and for legitimate business purposes such as fraud prevention.
When you delete your account, we will delete or anonymize your personal information within thirty (30) days, except where we are required by law to retain certain data or where data is needed for legitimate business purposes (such as resolving pending disputes or processing outstanding payments). Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely.
6. Data Security
We implement reasonable administrative, technical, and organizational safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL) and at rest, secure password hashing, access controls limiting employee access to personal data, and regular security reviews.
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. If we become aware of a security breach that affects your personal information, we will notify you in accordance with applicable law.
7. Your Rights
Depending on your location, you may have certain rights regarding your personal information. These may include the right to access your data and receive a copy of the personal information we hold about you, the right to correct inaccurate or incomplete information, the right to delete your personal information (subject to certain exceptions), the right to restrict how we process your data, the right to object to processing of your data, and the right to data portability (receiving your data in a structured, machine-readable format).
To exercise any of these rights, please contact us at privacy@tidystay.co. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may ask you to verify your identity before processing your request.
If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (see Section 12 for EEA/UK-specific information).
8. International Data Transfers
TidyStay is based in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For users in the EEA, UK, or Switzerland, we rely on the following transfer mechanisms to ensure adequate protection of your data: Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to our service providers, and any applicable adequacy decisions. By using the Service, you acknowledge and consent to the transfer of your information to the United States as described in this Policy.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@tidystay.co.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain your session and authentication state, remember your preferences, analyze how the Service is used, and improve performance and reliability.
Types of Cookies We Use. Essential cookies are required for the Service to function (e.g., authentication, security). These cannot be disabled. Analytics cookies help us understand how users interact with the Service so we can improve it. We currently use Google Analytics for this purpose.
Your Cookie Choices. You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service. For users in the EEA/UK, we will obtain your consent before placing non-essential cookies.
Do Not Track. Some browsers send a "Do Not Track" signal. There is currently no industry standard for responding to these signals, and we do not currently respond to them.
11. U.S. State Privacy Rights
If you are a resident of California, Colorado, Connecticut, Virginia, or another U.S. state with applicable privacy legislation, you may have additional rights, including the right to know what personal information we collect, use, and disclose, the right to delete your personal information, the right to opt out of the sale or sharing of your personal information (note: we do not sell or share your personal information for cross-context behavioral advertising), and the right to non-discrimination for exercising your privacy rights.
California Residents (CCPA/CPRA). In the preceding twelve months, we have collected the categories of personal information described in Section 1 of this Policy. We collect this information for the business purposes described in Section 2. We do not sell personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA/CPRA.
To exercise your rights under applicable state privacy laws, contact us at privacy@tidystay.co. You may also designate an authorized agent to make a request on your behalf.
12. Additional Information for EEA, UK, and Swiss Users
12.1 Data Controller
TidyStay LLC is the data controller for your personal information. Our contact details are provided in Section 14.
12.2 Legal Bases for Processing
We process your personal data under the following lawful bases under the GDPR:
Performance of a Contract. Processing necessary to provide the Service to you, including account management, calendar syncing, turnover generation, notifications, and payment processing.
Legitimate Interests. Processing necessary for our legitimate business interests, including improving and securing the Service, analyzing usage patterns, preventing fraud, and communicating with you about the Service. We balance these interests against your rights and freedoms.
Legal Obligation. Processing necessary to comply with legal requirements, such as tax reporting and responding to lawful requests.
Consent. Where required, we process data based on your freely given consent, such as for non-essential cookies or optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
12.3 Your GDPR Rights
In addition to the rights described in Section 7, EEA and UK users have the right to withdraw consent at any time where processing is based on consent, the right to lodge a complaint with your local supervisory authority (for EEA users, a list is available at edpb.europa.eu; for UK users, the Information Commissioner's Office at ico.org.uk), and the right to object to processing based on legitimate interests.
12.4 Data Transfers
As described in Section 8, your data is transferred to the United States. We ensure appropriate safeguards are in place through Standard Contractual Clauses and other approved mechanisms. You may request a copy of the relevant transfer safeguards by contacting us.
12.5 Data Protection Officer
We have not appointed a Data Protection Officer as we do not meet the threshold requirements under Article 37 of the GDPR. For privacy inquiries, please contact us using the details in Section 14.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least thirty (30) days before the changes take effect. We will update the "Last Updated" date at the top of this page. Your continued use of the Service after the effective date of the updated Policy constitutes acceptance of the changes. If you do not agree with the updated Policy, you must stop using the Service.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
TidyStay LLC
Email: privacy@tidystay.co
For general support inquiries, contact support@tidystay.co.