This notice explains how DirectStay uses information from property owners, prospective guests, and people who use DirectStay services.
Last updated August 5, 2026.
Private preview requests
When someone submits the owner private-preview request form, they confirm they own the property, manage it, or have permission to discuss it. They also authorize DirectStay to use submitted links and public property information to research a private preview. DirectStay will review any photos, listing materials, ratings or review references, guest promises, and attribution with the owner before publication. Nothing becomes public or bookable until the owner approves it and confirms DirectStay may use those materials.
What we collect
For owner intake, DirectStay may collect names, contact details, property and business information, submitted links, calendar sources, content, and notes. When a guest submits an inquiry on a live property site, DirectStay may collect the guest's contact details, requested dates, party size, message, reply preference, consent record, IP address, browser details, and related inquiry history.
How we use it
We use owner information to review, build, launch, secure, bill for, and support the requested service. We use guest-inquiry information to route the inquiry to the property owner, help the owner review it, prepare owner-approved reply drafts, prevent abuse, maintain records, and support the resulting guest relationship. The property owner controls booking acceptance, prices, payments, refunds, and guest communications.
First-touch owner attribution
When someone later submits the owner private-preview form, DirectStay may attach a limited first-touch snapshot to that lead: the landing-page path, referring website domain, selected campaign labels, and capture time. The browser may retain that first snapshot for up to 90 days. DirectStay does not include full referrer URLs, arbitrary query strings, advertising click IDs, search terms, IP addresses, browser fingerprints, or cross-site browsing history in this snapshot.
What we do not do
DirectStay does not use an intake request to contact guests, change Airbnb or VRBO listings, make the site public, make it bookable, or publish marketplace photos, listing materials, ratings, or review references without owner approval and confirmation that DirectStay may use them.
Service providers and AI-assisted tools
DirectStay may use hosting, database, email, security, analytics, payment, and AI-assisted service providers only as reasonably needed to operate and support the service. DirectStay does not sell owner or guest information, use one property's guest list to market another property, or knowingly permit owner or guest data to be used to train a general-purpose AI model.
Private previews
A first look is prepared for owner review. It is not intended to be searchable, public, or bookable unless the owner separately approves launch and the related content, inquiry, and booking setup.
Retention and removal
Owners can ask DirectStay to correct, export, or remove submitted intake and service information subject to their agreement and applicable law. Guests may ask to access, correct, or delete inquiry information, although the property owner may need to retain booking or transaction records. DirectStay may retain limited backups, security logs, consent records, billing records, and records required by law.
Security and choices
DirectStay uses reasonable safeguards but no online service can promise absolute security. You may choose not to submit an inquiry and contact the property owner through another available channel. DirectStay will provide legally required privacy notices and respond to applicable privacy requests.
Electronic agreements
When an owner accepts an agreement electronically, DirectStay retains the exact agreement, version, agreement fingerprint, typed signer name, title or capacity when applicable, authority attestation, acceptance time, IP address, and browser details. DirectStay uses this evidence to provide a signed copy, administer the service, prevent fraud, and establish the authenticity of the electronic record.
