Your Privacy Matters to Us
At 4stay, we believe privacy is a fundamental right. This policy explains how we collect, use, and protect your information with complete transparency.
Effective Date
March 1, 2026
Last Updated
April 18, 2026
Applies To
4stay.com, iOS and Android mobile apps, host portal
Questions?
privacy@4stay.comIntroduction
Information We Collect
How We Use Your Information
Information Sharing
Data Security
Data Retention
Your Privacy Rights
Children's Privacy
International Data Transfers
Cookies and Tracking
Policy Changes
Contact Us
Introduction
Information We Collect
How We Use Your Information
Information Sharing
Data Security
Data Retention
Your Privacy Rights
Children's Privacy
International Data Transfers
Cookies and Tracking
Policy Changes
Contact Us
The Short Version
We collect information necessary to provide housing accommodations and improve our services. We use advanced security measures to protect your data, never sell your personal information to third parties, and respect your right to privacy under global data protection laws. You can access, correct, or delete your data at any time.
1. Introduction
4stay, Inc. ("4stay," "we," "us," or "our") operates residential rental platforms and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services. By accessing and using 4stay, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.
We respect your privacy and are committed to being transparent about how we use your data. This policy applies to all users of our platform, whether you are a guest, host, or company administrator.
2. Information We Collect
2.1 Information You Provide Directly
When you create an account, make a booking, or communicate with us, we collect:
- Account information (name, email, phone number, profile picture)
- Payment information (credit card, bank account, billing address)
- Property details (address, photos, amenities, availability calendar)
- Booking and reservation details (dates, guest count, special requests)
- Communication history (messages, reviews, support tickets)
- Identity verification documents (government ID, passport)
- Tax and business information for hosts
- Accessibility and safety information
2.2 Information Collected Automatically
We automatically collect certain information about your device and usage:
- IP address, device type, browser type, and operating system
- Cookies and similar tracking technologies
- Clickstream data and page visit duration
- Search queries and filters used
- Error logs and system activity
- Location data (with your permission)
- Device identifiers and mobile app analytics
2.3 Information from Third Parties
We may receive information about you from third parties, including:
- Social media platforms (Facebook, Google) for account creation
- Payment processors and financial institutions
- Background check and identity verification services
- Other users (reviews, complaints, messages)
- Analytics and marketing partners
- Data brokers and public records
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing Services: Processing bookings, managing properties, facilitating payments, and delivering customer support
- Communication: Sending booking confirmations, updates, important notices, and responding to inquiries
- Safety and Security: Verifying identities, preventing fraud, protecting against abuse, and enforcing our policies
- Improvement: Analyzing usage patterns, testing features, and optimizing user experience
- Marketing: Sending promotional content, newsletters, and targeted advertising (with your consent)
- Legal Compliance: Fulfilling tax obligations, regulatory requirements, and legal requests
- Dispute Resolution: Investigating complaints and resolving disputes between users
- Research and Analytics: Understanding market trends and improving our platform
We only use your information for legitimate business purposes and in compliance with applicable laws. You can manage your communication preferences in your account settings at any time.
4. Information Sharing
We do not sell your personal information to third parties. However, we may share your information in the following circumstances:
4.1 Service Providers
We share information with vendors who assist us with payment processing, data analytics, customer support, hosting, and email delivery. All service providers are contractually obligated to protect your data and use it only for the specified purposes.
4.2 Between Users
When you book a property, we share your name, profile information, and messages with the host. Hosts share property details and availability with guests. Both parties can see booking history and reviews.
4.3 Legal Requirements and Safety
We may disclose information when required by law, such as in response to valid legal process, court orders, or government requests. We also share information to protect the safety of our users, prevent fraud, and enforce our Terms of Service.
4.4 Business Transfers
If 4stay is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your data becomes subject to a different privacy policy.
We never sell your personal data. Any third party sharing is limited to what is necessary to provide services, comply with law, or protect safety.
5. Data Security
We employ industry-standard technical, administrative, and physical safeguards to protect your information:
- SSL/TLS encryption for data in transit
- AES-256 encryption for sensitive data at rest
- Secure password hashing and salting
- Regular security audits and penetration testing
- Multi-factor authentication options
- Role-based access controls for employees
- Data breach response procedures
- ISO 27001 compliance and SOC 2 Type II certification
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we are committed to using reasonable efforts to protect your data. Please use a strong password and do not share your login credentials.
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
Account data
Retained until account deletion; some data may be kept for 7 years for tax and legal compliance
Booking data
Retained for 5 years after booking completion for dispute resolution and tax records
Analytics data
Retained for 2 years; aggregated data may be kept indefinitely
Support records
Retained for 3 years from last interaction
You can request deletion of your data at any time, subject to legal and contractual obligations. Some data may need to be retained for tax, accounting, or legal compliance purposes.
7. Your Privacy Rights
Depending on your location, you have certain rights regarding your personal information:
Access
Request and receive a copy of personal data we hold
Correction
Request correction of inaccurate or incomplete data
Deletion
Request deletion of your personal data under certain conditions
Portability
Receive your data in a portable, machine-readable format
Object & Restrict
Object to or restrict certain data processing activities
Opt Out
Opt out of marketing communications and data sales
How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@4stay.com with:
- Your full name and email address
- The specific right you wish to exercise
- Any relevant booking or account references
- A copy of government-issued ID for verification
We will respond to valid requests within 30 days, or as required by law. We may ask you to verify your identity before processing your request.
8. Children's Privacy
Our Services are not directed to children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with information, we will take steps to delete such information and terminate the child's account.
For users between 13 and 18 years old, we provide additional protections and require parental consent for certain data processing activities. Parents may contact us to review, manage, or delete information about their children.
If you believe a child has created an account or provided information to 4stay, please contact us immediately at privacy@4stay.com.
9. International Data Transfers
4stay operates globally and may transfer your information to countries outside your country of residence, including countries that may not have equivalent data protection laws. When we transfer information internationally, we implement appropriate safeguards:
- Standard contractual clauses approved by the European Commission
- EU-US Data Privacy Framework and UK-US Data Bridge
- Binding corporate rules for intra-group transfers
- Explicit consent where required by law
If you are located in the EU, UK, or other regions with strict data protection laws, you have rights under those laws regarding your information. Please contact us for more information about our transfer mechanisms.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, personalize content, and analyze usage. Please refer to our Cookie Policy for detailed information about our use of cookies, including how to manage your preferences.
You can control cookies through your browser settings or our preference center. Note that disabling certain cookies may affect your ability to use some features of our Services.
11. Policy Changes
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this policy. Your continued use of our Services following such modifications constitutes your acceptance of the updated Privacy Policy.
Version History
April 18, 2026
Updated international transfer mechanisms and clarified GDPR compliance
March 1, 2026
Major policy overhaul with enhanced transparency sections
January 15, 2026
Added cookie preferences and improved data retention details
October 2, 2025
Initial privacy policy publication
12. Contact Us
Real humans read every privacy email. If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Mailing Address
4stay, Inc.
Data Protection Officer
123 Housing Street
San Francisco, CA 94105
United States
Response Time
We aim to respond to all inquiries within 24-48 hours, and to valid legal requests within 30 days or as required by law.