Privacy Policy

Data we process

Account data: name, email address and sign-in credentials used to create and secure your account, including accounts created through Google sign-in.

Workspace data: properties, units, listings, bookings, tenant details, channel integrations and other operational content you or your integrations enter into StayMesh.

Usage data: technical logs and product-interaction events used to keep the service reliable and to understand how features are used.

Why we process it

To provide the service: creating your workspace, syncing bookings from connected channels, and operating calendars, listings and imports.

To secure the platform: authentication, abuse prevention and audit logging of changes to your data.

To communicate with you: transactional email such as sign-in links, invitations and important service notices.

Google sign-in

If you choose “Sign in with Google”, Google shares your name, email address and profile picture with us after you consent. We use this only to create and authenticate your StayMesh account. Google sign-in does not give StayMesh access to Gmail, Calendar, Drive or other Google Workspace content. Connecting Gmail is a separate, optional action with its own consent screen.

Optional Gmail integration and Google user data

Access: if a workspace owner or administrator separately connects Gmail, StayMesh requests only read-only Gmail access. Google grants read-only mailbox access, while StayMesh enforces an additional one-label boundary. StayMesh processes only messages that currently carry the Gmail label selected by the workspace. Spam and Trash are excluded. Google itself does not enforce this label boundary.

Use: StayMesh reads the full content and metadata of matching messages only to identify rental booking information, place the message and proposed extracted fields in the human review queue, and keep that user-facing booking workflow synchronised. A message never accepts or rejects a platform request and never creates or changes a StayMesh booking without the separate human-controlled workflow.

Storage and access: StayMesh stores the matching message, its sanitised preview, extracted details and review history. The Google refresh token is encrypted on the server and is never returned to the browser. Access within StayMesh follows workspace roles and is limited to providing and securing the Gmail import and review features.

Sharing: Google user data is not sold, used for advertising, used to determine creditworthiness, or used to train or improve a general-purpose artificial-intelligence or machine-learning model. It is shared with infrastructure processors only where needed to provide or secure the visible StayMesh features, subject to appropriate data-processing terms, or where required by law.

Mailbox actions: StayMesh never sends or replies to mail, creates or changes labels, marks mail as read, archives mail, moves mail or deletes mail. The integration uses Gmail only as a read-only source for the messages inside the selected label boundary.

Disconnecting and deletion: an owner or administrator can disconnect Gmail at any time. StayMesh then asks Google to revoke access, deletes the stored access token, and removes the Google subject, selected-label, sync-checkpoint and watch identifiers. Messages and audit history already imported into the workspace are retained under the workspace retention rules so prior human decisions remain explainable. A workspace owner can request deletion by contacting legal@staymesh.io.

StayMesh’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Processors and subprocessors

We use a small number of infrastructure providers to run StayMesh, including cloud hosting, database hosting and email delivery. Data is processed within these providers only to deliver the service you use, under data-processing terms appropriate for that role.

Retention and deletion

We keep workspace data while your workspace is active. You can delete properties, bookings and other records at any time. When you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it for legal or legitimate security purposes.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Workspace members should contact their workspace owner first, as the owner controls the workspace data. Contact us at legal@staymesh.io for any privacy request.

Contact

StayMesh is operated from the Netherlands. For questions about this policy or your data, email legal@staymesh.io.