Privacy Policy
What we collect and use
We use your hotel, dates, room type and preferences to prepare your request. Your order email is used for payment confirmation, delivery and recovery. Feedback you submit is stored with that order.
Draft answers and your email are kept in your browser for up to 30 days. Paid order details and the generated result are stored on our server for recovery. We do not access hotel accounts or contact hotels for you.
Services that process data
- Stripe processes payments. We retain transaction identifiers, amounts and refund status, but do not receive or store your card number. See Stripe’s privacy policy.
- Google Gemini API processes the booking details and preferences needed to generate your wording. We do not include your order email in the generation prompt.
- SendGrid processes your email address and email content for order delivery and newsletters.
- Railway and Cloudflare provide database, application hosting and website delivery. Their infrastructure may process connection and request data.
- Google Analytics and Crazy Egg process usage and device data. These services can use cookies and identifiers; this data is not necessarily anonymous. Crazy Egg is excluded from the payment and paid results pages. Verified paid purchases are reported to analytics using an order identifier, amount and currency, without booking details or email.
Cookies and browser storage
A secure, HttpOnly session cookie grants access to your saved order for one hour. Your emailed recovery link can renew access during the 30-day recovery period. Keep that link private. Analytics tools also use browser identifiers and cookies. Browser settings can restrict these tools.
Retention
- Order email, booking details, generated wording and feedback become unavailable after 30 days and are removed by a daily cleanup job, normally within the following 24 hours. This also applies to older delivery records. Hosting backups and provider records follow their respective retention settings.
- Transaction identifiers, purchase amounts, refund records and event identifiers are retained for payment reconciliation and fraud prevention.
- First-party page-view records expire after 30 days. We do not store referrer URLs in those records. Temporary rate-limit identifiers expire after their limit window.
- Newsletter emails remain until you unsubscribe. Unsubscribed addresses and status are retained as a suppression record unless you request removal. Old newsletter IP addresses and user-agent records are removed by the daily cleanup job.
Processor retention and analytics settings are separate from our application cleanup. Contact us for deletion requests or questions about your data.
Contact
If you have questions about this policy or want your data removed, email support@stayhustler.com.