Privacy

We collect what StayStory needs to work and nothing we have no use for. We do not sell your information, and we do not share it for advertising. The AI that drafts your recommendations is run by Anthropic, so what you write is sent there to produce a result. You can ask for a copy of your data, or for it to be deleted, by writing to info@staystory.co.

Your account. Your email address, your name if you give one, and a password that is hashed before it is stored — we never see it. If you subscribe, the customer reference Stripe gives us.

What you create in StayStory. Your properties, your Experience Audit answers, your Experience Compass, recommendations, Blueprints, Guest Journey Playbooks, stories and anything else you write or generate. This is the substance of the product and it is kept so you can come back to it.

What you tell us about your guests. Some tools let you describe a particular guest or occasion so StayStory can suggest something specific. Whatever you type there is stored with your account and sent to the AI like the rest. See your guests’ information below — this one carries a responsibility that is yours rather than ours.

If you answer the research questions on our homepage. Your name if you give one, your email address, and your answers. You do not need an account for this, and those answers are kept apart from the product.

Technical records. Our host keeps short-lived request logs. We record the IP address a sign-up came from, to stop one source creating accounts in bulk.

We do not use advertising trackers, and we do not build a profile of you for anyone else’s purposes.

• To give you an account and keep you signed in.
• To produce the recommendations, Playbooks and other work you ask StayStory for.
• To keep your work so it is there when you return.
• To take payment and manage a subscription, if you have one.
• To send the emails the service depends on — confirming your address, resetting a password, receipts.
• To understand what hosts need, so the product gets better.
• To keep the service secure and working.

StayStory uses a model operated by Anthropic. When you ask it to generate something, the relevant parts of what you have written — your Audit answers, your Compass, your notes — are sent to Anthropic so it can produce a result and return it to you.

We tell you this plainly because a privacy policy that says “we use AI” without saying your words leave the building is not telling you the thing that matters. If you would rather something never reached a model, do not type it into a tool whose purpose is to generate from it.

Only the companies that make the service run, and only for that purpose. Each is bound by its own agreement with us.

• Supabase — Database and account sign-in. Stores your account, your properties and everything you write in StayStory. Passwords are hashed by Supabase and are never visible to us.
• Anthropic — The AI that drafts recommendations and content. When you ask StayStory to generate something, the relevant parts of your Audit, Compass and notes are sent to Anthropic to produce it. Anthropic processes this to return a result for you.
• Stripe — Payments. Handles every payment. Card details go to Stripe directly and never reach StayStory — we store only the customer reference Stripe gives us.
• Resend — Email. Sends account emails: confirming your address, resetting a password, receipts.
• Vercel — Hosting. Runs the website and the application, and keeps short-lived technical logs of requests.

We may also disclose information if the law requires it, or to protect someone’s safety or our rights. If Laurel & Lore is ever sold or merged, your information could transfer with the business — you would be told before anything changed.

These companies are based in the United States and your information is processed there.

Your account and your work stay for as long as you have an account. Ask us to delete them and we will, other than anything we are required to keep — payment records, for instance, which tax rules oblige us to hold for a period.

Research answers are kept while they are still useful for understanding what hosts need. Sign-up IP records are kept only as long as they serve their anti-abuse purpose.

Write to info@staystory.co and we will:

• tell you what we hold about you;
• give you a copy;
• correct anything wrong;
• delete your account and your work;
• stop contacting you about research.

Depending on where you live you may have further rights — under the GDPR in the UK and EU, or the CCPA in California, among others. We will honour those requests regardless of where you are, because a right worth having should not depend on an address.

We do not sell personal information, and we have not in the past twelve months.

If you write a guest’s name or details into StayStory, you are putting another person’s information into our hands. We treat it exactly as we treat yours.

But the responsibility for sharing it is yours, not ours. Only enter what you genuinely need for the hospitality you are designing, and keep it to what your guest would expect you to be doing with it. A first name and the fact that it is an anniversary is a different thing from a medical note.

We use cookies to keep you signed in and to remember which property you are working on. There are no advertising or tracking cookies. Blocking the sign-in cookie will stop you being able to log in.

StayStory is for people running a hospitality business and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will remove it.

Passwords are hashed. Card details never reach us. Access to the database is restricted, and the tables holding your work are protected so one account cannot read another’s.

No service can promise to be unbreakable, and we will not pretend otherwise. If a breach ever affected your information, we would tell you.

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, email account holders. Continuing to use StayStory after a change means you accept it.