Privacy Policy
Last updated: December 2025
Version 1.0
Your Privacy Matters
This policy explains how HjemStay collects, uses, and protects your personal information. We've written it in plain language because you deserve to understand what happens with your data.
If anything is unclear, please contact us.
1. Who We Are
HjemStay is a digital guidebook platform for property hosts.
Contact: Contact form
2. What We Collect
If You're a Host
- Name and email — To create your account and contact you
- Payment details — To process subscription payments (via Stripe)
- Property information — To create and display your guidebooks
- PMS credentials — To sync with your property management system
- Usage data — To improve the Service and provide support
If You're a Guest
- Queries to AI concierge — To answer your questions about the property
- Device information — To display the guidebook correctly
- Maintenance reports — To relay issues to your host
- Location (if permitted) — To provide local recommendations
3. How We Use Your Information
We use your information to:
- Provide the Service — create guidebooks, power the AI concierge, process payments
- Communicate with you — respond to queries, send essential updates
- Improve HjemStay — understand how the Service is used, fix problems
- Ensure security — protect against fraud and abuse
- Comply with law — meet our legal obligations
We do not sell your personal information. We never have. We never will.
4. AI and Your Data
HjemStay uses artificial intelligence to power the guest concierge and local recommendations.
- Guest queries are processed by AI to generate responses
- We do not use your personal data to train AI models without consent
- AI-generated content may contain errors — verify important information independently
- We may use anonymised, aggregated patterns to improve our AI systems
5. How Long We Keep Data
- Account data — Until you delete your account, plus 30 days
- Payment records — 7 years (tax requirements)
- Guest queries — 12 months
- Usage analytics — 26 months (anonymised thereafter)
- Support correspondence — 3 years
6. Your Rights
You have the right to:
- Access — request a copy of your data
- Correct — fix inaccurate information
- Delete — request erasure of your data
- Restrict — limit how we process your data
- Port — receive your data in a portable format
- Object — opt out of certain processing
- Withdraw consent — where processing is based on consent
To exercise these rights, contact us. We respond within 30 days.
7. Security
We protect your data with:
- Encryption in transit (TLS) and at rest
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
No system is perfectly secure. If you suspect a security issue, please report it through our contact form.
8. Cookies
We use cookies to keep you signed in, remember your preferences, and understand how the Service is used. Essential cookies are required for the Service to work. You can decline optional cookies in your browser settings.
9. Changes to This Policy
We may update this policy. For significant changes, we'll notify you by email and/or in the Service at least 30 days before they take effect.
10. Contact Us
Questions about this policy or your data? Get in touch.
This policy is designed to be clear and fair. If anything is confusing, please let us know.