Privacy Policy

Who we are

This Privacy Policy explains how AI Transform Studio Ltd (registered in England and Wales) (“we”, “us”) processes personal data when you use Stay180 at stay180.app.

Contact for privacy requests: support@stay180.app.

Scope

Stay180 is built so confirmed stays stay on your device. This policy covers personal data we process as a controller for the website, payments, and optional Google Calendar connection. It does not mean we receive a copy of your stay list — we do not.

A plain-language summary of how calendar import works is on the Your data page. If that summary and this policy ever differ, this Privacy Policy applies.

Personal data we collect

Depending on how you use the Service, we may process:

• Stay data on your device — entry and exit dates and related fields you confirm. This is stored in your browser. We do not upload it to our servers.
• Google account identifiers and a short-lived calendar token — only if you choose Connect Google Calendar, and only in this browser session. We do not save the login on our servers. Closing the tab signs you out.
• Calendar events you choose to load in the browser — processed on your device so you can confirm travel. We do not keep a server copy of your calendar.
• Billing data — if you buy Stay180 Pro, payment status and related identifiers from Stripe. Payment card details are handled by Stripe and not stored on our servers.
• Usage and technical data — IP address, device/browser metadata, and request logs created when the site or checkout APIs are used, as needed to operate and secure the Service.
• Support content — messages you send to support.

What we do not collect

We do not require a Stay180 account. We do not ask to read Gmail. We do not use your calendar to build advertising profiles. We do not sell personal data.

Google Calendar

When you connect Google, sign-in happens in your browser with Google Identity Services. Stay180 requests read-only Calendar access so it can suggest hotels, flights, and tagged trips for you to confirm. Everything else is ignored unless you confirm it as a stay.

Google does not offer a scope limited to flights and hotels only, so read-only calendar access is required for that import. You can instead drop a calendar file, which never leaves this device.

We never send your Google login or calendar contents to Stay180 servers. Google’s own terms and privacy policy apply to your Google account.

Calendar files

If you drop a calendar file, it is parsed on this device. It is not uploaded to our servers.

Payments

If you buy Stay180 Pro, Stripe processes the payment. We receive confirmation that a payment succeeded so we can unlock Pro in this browser. We do not store your card number.

Purposes and legal bases

We process personal data to provide the Service (contract / legitimate interests for a free tool you choose to use), to take payment and prevent fraud (contract / legitimate interests), to secure and debug the website (legitimate interests), and to comply with law.

Where UK GDPR requires consent for a specific optional processing activity, we will ask for it. We do not currently run advertising cookies or advertising trackers.

Sharing

We share personal data with subprocessors that help us run the Service (listed below), with professional advisers if required, and with authorities when law requires. We do not sell personal data.

• Vercel — Web application hosting and edge delivery
• Stripe — Payment processing for Stay180 Pro
• Google — Optional Google Calendar sign-in and read-only calendar access, only if you connect Calendar

International transfers

We and several subprocessors operate outside the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy regulations, as applicable to each subprocessor.

Retention

Confirmed stays remain in your browser until you delete them or clear this site’s data. We do not retain a server copy of those stays.

Hosting logs are kept for a short operational period. Stripe retains billing records as required for their service and for tax and accounting rules. You may ask us about deletion via support@stay180.app; we will delete what we hold within a reasonable period, subject to legal retention needs.

Security

We keep stay lists off our servers on purpose. Google Calendar access is session-only in the browser. Payments go through Stripe. The website is served over HTTPS. No method of transmission or storage is perfectly secure.

Your rights

If UK GDPR applies to you, you may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is consent-based. Contact support@stay180.app. You may also complain to the UK Information Commissioner’s Office (ICO).

For stays stored only on your device, the practical way to erase them is to delete them in Stay180 or clear this site’s data in your browser.

Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children.

Changes

We may update this policy by posting a new version and changing the “Last updated” date. Material changes will be called out where practicable.