Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how Previosa a.s. (Přádova 2092/12, Libeň, 182 00 Praha 8, Czech Republic, IČO: 28214587), operating Staylight ("we", "us"), processes personal data as data controller, in accordance with the EU General Data Protection Regulation (GDPR).

1. What we collect

  • Account data: name, email address, organization and property details you provide at signup.
  • Billing data: handled by Stripe on our behalf — we do not store your card number.
  • Property/business data: hotel name, domain, city, positioning, competitors, and facts you choose to add.
  • Lead data: email address and inputs submitted through the free ROI calculator.
  • Usage data: basic technical logs needed to operate and secure the Service.

We do not send any guest or traveler personal data to third parties as part of the scanning process — the questions we test against AI engines are generic, non-brand travel queries, not guest records.

2. Why we process it, and on what legal basis

  • Contract: to create your account, run scans, generate reports, and process billing.
  • Legitimate interest: to secure the Service, respond to support requests, and send service-related communications (e.g. billing notices, scan results).
  • Consent: for the free ROI calculator, by submitting your email you consent to receiving the requested report and related follow-up; you can withdraw this at any time.

3. Who we share it with (processors)

We use the following processors to operate the Service:

  • Supabase — database and authentication.
  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel and Render — application hosting.
  • DataForSEO and Anthropic — process the generic, non-brand queries and AI-generated answers used for scanning and analysis; no guest or traveler personal data is included in this processing.

Some processors may process data outside the European Economic Area. Where they do, transfers are made under appropriate safeguards, such as the EU Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework.

4. Retention

We retain account and property data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, and tax obligations. ROI-calculator lead data is retained until you unsubscribe or for up to 12 months, whichever is sooner.

5. Your rights

Under the GDPR, you have the right to access, rectify, erase, or port your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at krivanec@mmccdigital.com. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) or your local supervisory authority.

6. Cookies

See our Cookie Policy for details on the cookies we use.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email.

8. Contact

Data controller: Previosa a.s. Contact: krivanec@mmccdigital.com.