Privacy Policy

Last Updated: May 24, 2026

This Privacy Policy explains how StayStrategy ("we," "us," "our") collects, uses, and shares information about you when you visit staystrategy.com (the "Site"), use our diagnostic tool, contact us, or engage our services. By using the Site or our services, you agree to this Policy.

1. Who We Are

StayStrategy provides search visibility and performance marketing services for hospitality operators, including hotels, short-term rental operators, tour and activity providers, and attractions. We operate from Florida, United States.

2. Information We Collect

We collect the following categories of information:

Information you provide directly

  • Business information you enter into our diagnostic tool (business name, city, business type)

  • Contact information (name, email address, phone number, business address)

  • Information you submit through intake forms, support requests, or correspondence (such as photos, amenities, categories, competitor lists, and similar business details)

  • Access credentials and authorizations you grant us to manage your accounts on third-party platforms (Google Business Profile, ad accounts, content management systems, listings sites)

  • Payment information, which is collected and processed by our payment processor (see Section 4)

Information collected automatically

  • Device and browser information (browser type, operating system, screen size, language)

  • IP address and approximate location derived from it

  • Pages viewed, links clicked, time on page, referring URLs, and similar usage data

  • Cookies, pixels, and similar tracking technologies (see Section 6)

Information from third parties

  • Results returned from third-party AI systems (such as ChatGPT and Perplexity) when our diagnostic tool runs queries about your business

  • Information about your business that is publicly available or available through platforms you authorize us to access

  • Information from analytics and advertising partners about how you interacted with our ads

We do not knowingly collect sensitive personal information (such as government identifiers, health information, or precise geolocation) through the Site.

3. How We Use Information

We use the information we collect to:

  • Operate the Site and the diagnostic tool, including generating reports

  • Provide, deliver, and support the services you've engaged

  • Process payments and manage your account

  • Communicate with you about your engagement, support requests, and service updates

  • Send marketing emails about our services (you can opt out at any time)

  • Improve our services, develop new offerings, and produce aggregated and anonymized research and case studies

  • Run, measure, and optimize advertising on platforms like Meta, Reddit, and Google

  • Detect, prevent, and address fraud, abuse, security issues, and technical problems

  • Comply with legal obligations and enforce our Terms of Service

4. How We Share Information

We share information in the following situations:

Service providers and subcontractors. We share information with vendors who help us run our business, under contracts that limit their use of your information. These include:

  • Payment processing: Stripe

  • Form intake: Tally

  • Hosting and infrastructure: Vercel and similar providers

  • Website platform: Framer

  • Email and communications: [your email service]

  • Analytics: [your analytics provider, e.g., Google Analytics]

  • AI query infrastructure: OpenAI, Perplexity, and similar providers used by the diagnostic tool

  • Delivery contractors: Offshore SEO contractors who execute work on your account

Advertising partners. We share limited information with advertising platforms (such as Meta and Reddit) through pixels and conversion APIs so we can measure ad performance and reach similar audiences. See Section 6.

Third-party platforms you authorize. When you grant us access to your Google Business Profile, ad accounts, or other platforms, we act on your behalf on those platforms, subject to their terms.

Legal and safety. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of StayStrategy, our clients, or others.

Business transfers. If StayStrategy is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information for monetary consideration. Some sharing with advertising partners may be considered "sharing" or "sale" under certain state privacy laws (see Section 9).

5. The Diagnostic Tool

When you use our diagnostic tool, we:

  • Collect the business name, city, business type, and email address you provide

  • Submit automated queries about your business (or businesses in your category and city) to third-party AI systems including ChatGPT and Perplexity

  • Store the results of those queries, including text returned by the AI systems

  • Send the resulting report to the email address you provided and display it in your browser

  • Use your email to follow up about our services, until you opt out

The queries we send do not include personal information about you. The results are point-in-time snapshots and may be retained by the third-party AI providers under their own policies, which we do not control.

6. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies for the following purposes:

  • Strictly necessary: to operate the Site, process payments, and remember session state

  • Analytics: to understand how visitors use the Site (such as Google Analytics)

  • Advertising: to measure and optimize ads on Meta, Reddit, and similar platforms (Meta Pixel, Reddit Pixel, and conversion APIs)

You can control cookies through your browser settings, and you can opt out of advertising cookies through industry tools such as the Network Advertising Initiative and Digital Advertising Alliance. Opting out of cookies may affect how the Site functions.

We do not currently respond to "Do Not Track" browser signals because there is no industry standard for how to interpret them.

7. Data Retention

We retain information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Diagnostic reports and associated query results are retained for at least 24 months for service improvement and benchmarking. You can request deletion of your information as described in Section 9.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, access controls, and vetted service providers. No system is perfectly secure, and we cannot guarantee the security of information transmitted to or stored by us.

9. Your Rights and Choices

Depending on where you live, you may have the following rights:

  • Access: ask what personal information we hold about you

  • Correction: ask us to correct inaccurate information

  • Deletion: ask us to delete your information, subject to legal exceptions

  • Opt-out of marketing emails: use the unsubscribe link in any marketing message

  • Opt-out of targeted advertising: as described in Section 6

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what categories of personal information we collect and share, the right to delete, the right to correct, the right to opt out of "sharing" of personal information for cross-context behavioral advertising, and the right to non-discrimination for exercising these rights. To exercise these rights, contact us at [Contact email].

We may need to verify your identity before responding to a request. We will respond within the timeframe required by applicable law.

10. International Data Transfers

We are based in the United States, and our service providers and contractors may be located outside the United States (including the Philippines and Eastern Europe). By using our services, you acknowledge that your information may be transferred to and processed in countries with different data protection laws than your own.

11. Children's Privacy

The Site and services are intended for businesses and adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have collected information from a child, contact us and we will delete it.

12. Third-Party Links

The Site may contain links to third-party websites and platforms. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them information.

13. Changes to This Policy

We may update this Policy from time to time. Updated versions will be posted on staystrategy.com with a revised "Last updated" date. Material changes will be communicated to active clients by email. Continued use of the Site or services after the effective date constitutes acceptance of the updated Policy.

14. Contact

Questions, concerns, or requests regarding this Policy?

StayStrategy
chris@staystrategy.co
staystrategy.co

StayStrategy

Legal

StayStrategy

Legal