Privacy policy
How OkeyStay processes your personal data, why, and with what safeguards. Data controller: ActiveNetwork Global SL.
Last updated:
1. Who the controller is
- Company: ActiveNetwork Global SL (OkeyStay)
- Tax ID (CIF): B93372217
- Address: Decano Manuel Domínguez, 12, 29140 Churriana (Málaga), Spain
- Registered in the Málaga Companies Register, Volume 5353, Book 4260, Folio 62, Sheet MA-126151, Entry 1
- Privacy contact: okeystay.com/en/contact
2. What data we process and why
- Create and manage your account and publish your properties (hosts). Data: name, email, phone, country, tax/VAT ID, property data (address, tourist registration number, photos, calendar, prices). Legal basis: performance of a contract.
- Manage bookings and payments. Data: booking and guest data, payment data handled by Stripe. Legal basis: performance of a contract; legal obligation (invoicing and accounting).
- Import listings and sync calendars from other platforms you connect. Data: data from your listings and calendars on those platforms. Legal basis: your request; performance of a contract.
- AI agents that assist travellers for each property. Data: traveller messages, property data and host replies. Legal basis: performance of a contract; legitimate interest in providing 24-hour assistance.
- Customer support and service communications. Data: contact details and message content. Legal basis: performance of a contract; legitimate interest.
- Keys programme and rewards. Data: account, eligible bookings, invitations, tax details if you collect cash rewards. Legal basis: performance of the programme terms; legal obligation (invoicing).
- Marketing emails about OkeyStay. Data: name and email. Legal basis: your consent, which you can withdraw at any time.
- Security, fraud prevention and service improvement. Data: technical data (IP, device, logs). Legal basis: legitimate interest.
We do not process special categories of data.
3. Who we share data with
- Stripe, to process payments and payouts. It has its own terms and privacy policy.
- Viator, only if you book experiences through them, under their own terms.
- Hetzner, which provides the hosting and infrastructure where the platform's data is stored (data centres in the European Union).
- Cloudflare, which provides network, performance and security services for the site (for example, protection against attacks and content delivery).
- Other technical providers that serve us and process data on our behalf: email, maps (OpenStreetMap and OpenFreeMap) and artificial-intelligence models for the agents. All of them process data only to provide the service to us and with the safeguards required by law.
- Authorities, when the law requires it.
- HostFlow Stay (hostflowstays.com) and OceanPrice (ocean-price.com), management and dynamic-pricing services from the same product ecosystem, with which we share the data needed to provide you those services when you subscribe, to apply the Pro plan (10% commission) and to calculate referral programme rewards. Each service may also have its own privacy policy.
- We do not sell your data.
4. Transfers outside the European Economic Area
Some providers (for example Stripe, Cloudflare or AI providers) may process data outside the European Economic Area. When this happens, we require the safeguards established by data protection law, such as adequacy decisions or standard contractual clauses.
5. How long we keep data
- Account and listings: while your account is active. If you close it, the listing stops being displayed immediately and we keep your content for 30 days in case you want to reactivate it; then we delete it.
- Invoices, bookings and accounting data: for the periods required by tax and commercial law.
- Data needed to resolve a dispute: until it is resolved and while liabilities may arise.
- Marketing consent: until you withdraw it.
6. Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability of your data. Write to us at okeystay.com/en/contact saying what you want; we may ask you to verify your identity. You can withdraw your consent at any time and unsubscribe from marketing emails from each message. If you are not satisfied with our response, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority of your country.
7. AI agents
OkeyStay's AI agents answer travellers using each property's information and can make mistakes. If an agent does not know something, it may ask the host, and those answers are used to improve the agents of that property. We do not make automated decisions with legal effects on you.
8. Cookies
We use the technical cookies necessary for the site to work and be secure (session, preferences such as language, and security cookies that Cloudflare may set to tell legitimate from automated traffic). If we use analytics or advertising in the future, we will ask for your consent before activating them and update this policy.
9. Other people's data
If you enter data about guests, co-owners or other people, make sure you are entitled to do so and that you inform them where required.
10. Changes
We will publish any changes here with their date and notify you of important changes.
