Your Privacy Matters to Us

At 4stay, we believe privacy is a fundamental right. This policy explains how we collect, use, and protect your information with complete transparency.

Effective Date

March 1, 2026

Last Updated

April 18, 2026

Applies To

4stay.com, iOS and Android mobile apps, host portal

Introduction

Information We Collect

How We Use Your Information

Information Sharing

Data Security

Data Retention

Your Privacy Rights

Children's Privacy

International Data Transfers

Cookies and Tracking

Policy Changes

Contact Us

Introduction

Information We Collect

How We Use Your Information

Information Sharing

Data Security

Data Retention

Your Privacy Rights

Children's Privacy

International Data Transfers

Cookies and Tracking

Policy Changes

Contact Us

The Short Version

We collect information necessary to provide housing accommodations and improve our services. We use advanced security measures to protect your data, never sell your personal information to third parties, and respect your right to privacy under global data protection laws. You can access, correct, or delete your data at any time.

1. Introduction

4stay, Inc. ("4stay," "we," "us," or "our") operates residential rental platforms and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services. By accessing and using 4stay, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

Plain English

We respect your privacy and are committed to being transparent about how we use your data. This policy applies to all users of our platform, whether you are a guest, host, or company administrator.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, make a booking, or communicate with us, we collect:

  • Account information (name, email, phone number, profile picture)
  • Payment information (credit card, bank account, billing address)
  • Property details (address, photos, amenities, availability calendar)
  • Booking and reservation details (dates, guest count, special requests)
  • Communication history (messages, reviews, support tickets)
  • Identity verification documents (government ID, passport)
  • Tax and business information for hosts
  • Accessibility and safety information

2.2 Information Collected Automatically

We automatically collect certain information about your device and usage:

  • IP address, device type, browser type, and operating system
  • Cookies and similar tracking technologies
  • Clickstream data and page visit duration
  • Search queries and filters used
  • Error logs and system activity
  • Location data (with your permission)
  • Device identifiers and mobile app analytics

2.3 Information from Third Parties

We may receive information about you from third parties, including:

  • Social media platforms (Facebook, Google) for account creation
  • Payment processors and financial institutions
  • Background check and identity verification services
  • Other users (reviews, complaints, messages)
  • Analytics and marketing partners
  • Data brokers and public records

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing Services: Processing bookings, managing properties, facilitating payments, and delivering customer support
  • Communication: Sending booking confirmations, updates, important notices, and responding to inquiries
  • Safety and Security: Verifying identities, preventing fraud, protecting against abuse, and enforcing our policies
  • Improvement: Analyzing usage patterns, testing features, and optimizing user experience
  • Marketing: Sending promotional content, newsletters, and targeted advertising (with your consent)
  • Legal Compliance: Fulfilling tax obligations, regulatory requirements, and legal requests
  • Dispute Resolution: Investigating complaints and resolving disputes between users
  • Research and Analytics: Understanding market trends and improving our platform
Plain English

We only use your information for legitimate business purposes and in compliance with applicable laws. You can manage your communication preferences in your account settings at any time.

4. Information Sharing

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers

We share information with vendors who assist us with payment processing, data analytics, customer support, hosting, and email delivery. All service providers are contractually obligated to protect your data and use it only for the specified purposes.

4.2 Between Users

When you book a property, we share your name, profile information, and messages with the host. Hosts share property details and availability with guests. Both parties can see booking history and reviews.

4.3 Legal Requirements and Safety

We may disclose information when required by law, such as in response to valid legal process, court orders, or government requests. We also share information to protect the safety of our users, prevent fraud, and enforce our Terms of Service.

4.4 Business Transfers

If 4stay is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your data becomes subject to a different privacy policy.

Plain English

We never sell your personal data. Any third party sharing is limited to what is necessary to provide services, comply with law, or protect safety.

5. Data Security

We employ industry-standard technical, administrative, and physical safeguards to protect your information:

  • SSL/TLS encryption for data in transit
  • AES-256 encryption for sensitive data at rest
  • Secure password hashing and salting
  • Regular security audits and penetration testing
  • Multi-factor authentication options
  • Role-based access controls for employees
  • Data breach response procedures
  • ISO 27001 compliance and SOC 2 Type II certification

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we are committed to using reasonable efforts to protect your data. Please use a strong password and do not share your login credentials.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account data

Retained until account deletion; some data may be kept for 7 years for tax and legal compliance

Booking data

Retained for 5 years after booking completion for dispute resolution and tax records

Analytics data

Retained for 2 years; aggregated data may be kept indefinitely

Support records

Retained for 3 years from last interaction

Plain English

You can request deletion of your data at any time, subject to legal and contractual obligations. Some data may need to be retained for tax, accounting, or legal compliance purposes.

7. Your Privacy Rights

Depending on your location, you have certain rights regarding your personal information:

Access

Request and receive a copy of personal data we hold

Correction

Request correction of inaccurate or incomplete data

Deletion

Request deletion of your personal data under certain conditions

Portability

Receive your data in a portable, machine-readable format

Object & Restrict

Object to or restrict certain data processing activities

Opt Out

Opt out of marketing communications and data sales

How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@4stay.com with:

  • Your full name and email address
  • The specific right you wish to exercise
  • Any relevant booking or account references
  • A copy of government-issued ID for verification

We will respond to valid requests within 30 days, or as required by law. We may ask you to verify your identity before processing your request.

8. Children's Privacy

Our Services are not directed to children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with information, we will take steps to delete such information and terminate the child's account.

For users between 13 and 18 years old, we provide additional protections and require parental consent for certain data processing activities. Parents may contact us to review, manage, or delete information about their children.

Plain English

If you believe a child has created an account or provided information to 4stay, please contact us immediately at privacy@4stay.com.

9. International Data Transfers

4stay operates globally and may transfer your information to countries outside your country of residence, including countries that may not have equivalent data protection laws. When we transfer information internationally, we implement appropriate safeguards:

  • Standard contractual clauses approved by the European Commission
  • EU-US Data Privacy Framework and UK-US Data Bridge
  • Binding corporate rules for intra-group transfers
  • Explicit consent where required by law

If you are located in the EU, UK, or other regions with strict data protection laws, you have rights under those laws regarding your information. Please contact us for more information about our transfer mechanisms.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, personalize content, and analyze usage. Please refer to our Cookie Policy for detailed information about our use of cookies, including how to manage your preferences.

You can control cookies through your browser settings or our preference center. Note that disabling certain cookies may affect your ability to use some features of our Services.

11. Policy Changes

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this policy. Your continued use of our Services following such modifications constitutes your acceptance of the updated Privacy Policy.

Version History

April 18, 2026

Updated international transfer mechanisms and clarified GDPR compliance

March 1, 2026

Major policy overhaul with enhanced transparency sections

January 15, 2026

Added cookie preferences and improved data retention details

October 2, 2025

Initial privacy policy publication

12. Contact Us

Real humans read every privacy email. If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Mailing Address

4stay, Inc.
Data Protection Officer
123 Housing Street
San Francisco, CA 94105
United States

Response Time

We aim to respond to all inquiries within 24-48 hours, and to valid legal requests within 30 days or as required by law.