1. Data We Collect
VimoStay collects data to provide a high-quality digital welcome book experience. Depending on your interactions with the Platform, we collect the following:
A. From Hosts (B2B):
- Registration Data: Email address, display name, and avatar obtained from OAuth providers (Google or Apple).
- Property Info: Addresses, coordinates, images, entry instructions, and house rules.
- Billing Details: All payment processing and card data are handled securely by Stripe. VimoStay does not store credit card numbers on its servers.
B. From Guests (B2C):
- Usage Analytics: We log anonymous visits to guide sections, clicks on maps, and checkout surveys. We do not collect names or emails from guests unless voluntarily submitted in host forms.
- Technical Data: Anonymized IP addresses, browser types, and language settings to translate guidebooks automatically.
2. How We Use Data
We process information strictly for the following purposes:
- Providing, operating, and maintaining the Platform.
- Processing host billing and subscriptions via Stripe.
- Optimizing file sizes and loading speeds (media compressions).
- Translating guidebooks dynamically for guests using AI.
- Aggregating host analytics to show guidebook interaction rates.
3. Legal Bases for Processing (GDPR)
If you reside in the EEA, we process data under the following legal bases:
- Performance of a Contract: To manage host subscriptions and accounts.
- Legitimate Interest: To maintain secure platforms and generate aggregate usage statistics.
- Consent: When guests opt to complete feedback forms or exit surveys.
4. Data Sharing
VimoStay does not sell or lease personal data. We share details only with trusted sub-processors necessary for our SaaS architecture:
- Google Firebase: Hosting, authentication, database storage, and media file CDNs.
- Stripe: Secure billing and card payment gateways.
- Google Gemini API: AI-powered translation and copywriting tools (on request by the host).
5. International Data Transfers
VimoStay is based in Canada and uses cloud infrastructure located in the United States. We implement Standard Contractual Clauses (SCCs) to ensure safe, compliant data pipelines from the EU and UK.
6. Your Privacy Rights (GDPR/CCPA/PIPEDA)
You hold the following rights regarding your personal information:
- Access & portability: Request copies of your processed personal data.
- Correction: Modify profile and account settings directly.
- Deletion (“Right to be Forgotten”): Request the permanent removal of your account and properties.
- Restrict processing: Object to processing under specific circumstances.
7. Security and Retention
We employ robust technical measures to protect against data breaches, leaks, or alterations. Personal data is stored for as long as your account remains active or as required by law.
9. Contact Us
If you have questions about this Privacy Policy, contact us at:
VimoStay Ltd.
Email: privacy@vimostay.com
Address: 181 Bay Street, Suite 292, Toronto, Ontario M5J 2T3, Canada