Legal
Privacy notice
How NextStay approaches personal data for this marketing website and, at a high level, for the guest-management platform — including GDPR, stay-link security, and what we ask hosts not to do.
Controller contact: info@nextstay.online · Europe.
This marketing site collects information you choose to send us (for example through email or contact forms), plus standard technical logs required to operate the website securely.
When you use the NextStay platform, guest and host data is processed to deliver online check-in, stay dashboards, messaging, instructions and services. Check-in data — including photo ID captured for the stay — is handled on the encrypted stay link between guest and host. We design flows so guests are not asked to send identity documents over WhatsApp or other unmanaged chat channels.
Hosts should only collect information necessary for the stay and applicable formalities. Photographing guest documents on a personal phone (or asking housekeeping / other staff to do so) creates unnecessary GDPR and security risk. NextStay exists to keep that work in the product, not on private devices.
We do not sell personal data. Access is limited to people and processors who need it to operate NextStay. Retention follows the purpose of the processing and applicable law, including the GDPR where it applies.
You may contact us to exercise applicable data-protection rights. This notice may be updated as the product and hosting setup evolve.