Privacy policy
Version 2026-09-28.3
Who handles the data
The provider of Stayfig handles account, product and subscription data. Contact support@stayfig.com or write to Vasagatan 15B, 411 24 Gothenburg, Sweden, for privacy questions or to exercise your rights. Hosts decide what guest information to request for their accommodation; Stayfig processes those requests to provide the service.
What we use
We process account email and sign-in records; listing content, photos and calendar links; booking request contact details, dates and messages; subscription company details, VAT number, invoice and payment status; and technical data needed for security and service operation. Stripe handles card details; Stayfig does not receive full card numbers.
Product analytics
On Stayfig’s marketing and host pages, we use PostHog in its EU region to understand which parts of the product are used. We send only a broad page category, an editor section when opened, and whether setup was completed. We do not send guest booking details, listing IDs, full page addresses, account emails, company or payment details to PostHog. We do not use analytics cookies or browser storage, create named analytics profiles, or record sessions. The temporary random analytics ID is reset when the page reloads. PostHog receives the technical connection needed to deliver an event; we configure it to discard the visitor’s IP address. We respect your browser’s Do Not Track setting.
Why and with whom
We use this information to provide pages, booking requests, calendars, customer support, billing, security and legally required records, and to improve the usability of Stayfig through limited product analytics. Processing rests on providing the service, legitimate interests in security, support and product improvement, and legal duties such as accounting. Service providers include Supabase for database/authentication/storage, Vercel for hosting, Resend for email, Stripe for payments and invoices, and PostHog for product analytics. Guests’ requests are shared with the relevant host. We do not sell personal data.
How we protect it
We use authenticated access, database access rules, encrypted connections and restricted server credentials. No online service can guarantee absolute security. Please contact support@stayfig.com if you believe your information has been exposed.
Retention, rights and contact
We keep information while needed to run the account or handle a request, and retain records longer where law or an unresolved dispute requires it. Deleting a listing or account removes associated service data subject to those exceptions. You may request access, correction, deletion, restriction, objection or portability where applicable, and complain to the Swedish privacy authority IMY. Email support@stayfig.com. The host is also the contact for guest data about a particular stay.