Privacy Policy

Last updated: June 2026

1. Who we are

Stay Optimiser is a listing optimisation platform for short-term rental hosts, owned and operated by OG-Tech Ltd (“we”, “us”, “our”). OG-Tech Ltd is the data controller for personal data collected through stayoptimiser.com. Contact: hello@stayoptimiser.com

2. What data we collect

  • Account data: Name, email address, profile image (via Clerk authentication).
  • Listing data: Airbnb / VRBO listing URLs and publicly available listing content you submit for analysis.
  • Payment data: Transaction amounts, timestamps, and Stripe payment intent IDs. We do not store full card numbers — Stripe handles card processing.
  • Usage data: Analysis requests, credits used, report access timestamps.
  • Technical data: IP address, browser type, pages visited and referrer, collected via standard server logs (and, if enabled in future, privacy-friendly analytics — see our Cookie Policy).
  • Communications: Emails you send to us and emails we send you.

3. Legal basis for processing (GDPR Article 6)

  • Contract performance (Art. 6(1)(b)): Processing necessary to provide our analysis service, process payments, and deliver results.
  • Legitimate interests (Art. 6(1)(f)): Analytics to improve our service, fraud prevention, and security.
  • Consent (Art. 6(1)(a)): Marketing emails and non-essential cookies — you may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): Retaining transaction records for accounting and tax purposes.

4. How we use your data

  • Creating and managing your account.
  • Running AI analysis on listing URLs you submit.
  • Processing payments and issuing credits.
  • Sending transactional emails (analysis complete, payment confirmation, expiry reminders).
  • Sending marketing emails where you have opted in.
  • Improving service quality through aggregate, anonymised analytics.

5. Data sharing and third parties

We share data only as necessary:

  • Clerk (clerk.com) — authentication and user management. Data processed under their DPA.
  • Stripe (stripe.com) — payment processing. Stripe is a PCI-DSS certified processor.
  • OpenAI (openai.com) — listing analysis via GPT-4o. Listing URLs and publicly available content are sent to OpenAI for analysis. We do not send personal identity information.
  • Resend (resend.com) — transactional email delivery.
  • Microsoft Azure — database and infrastructure hosting (UK/EU regions).

We do not sell your personal data to third parties.

6. Data retention

  • Analysis reports: 7 days (basic) or 30 days (premium) from completion, then deleted from the report view. Raw data retained for 12 months for dispute resolution and quality improvement.
  • Account data: Retained for the life of your account plus 12 months after deletion request.
  • Payment records: 7 years for accounting and tax compliance.
  • Server logs: 90 days.

7. Cookies

We use strictly necessary cookies for authentication and core functionality, and we store your cookie preference in your browser. We do not currently run third-party analytics or advertising cookies. Full details, including how to manage your preferences, are in our Cookie Policy.

8. Your rights under GDPR

If you are in the UK or EEA, you have the following rights:

  • Right of access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): Ask us to correct inaccurate data.
  • Right to erasure (Art. 17): Ask us to delete your data where there is no compelling reason to retain it.
  • Right to restrict processing (Art. 18): Ask us to pause processing your data.
  • Right to data portability (Art. 20): Receive your data in a machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making (Art. 22): Our AI analysis produces a report but does not make decisions about you that have legal or similarly significant effects.

To exercise any of these rights, email hello@stayoptimiser.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (ico.org.uk) in the UK.

9. International transfers

Some of our service providers (OpenAI, Stripe, Clerk, Resend) are based in the United States. Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses and/or adequacy decisions as the transfer mechanism.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users by email of material changes. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact us

For privacy enquiries or to exercise your rights, contact us at hello@stayoptimiser.com.