This Privacy Policy describes how Zenstay Inc (“ZenStay”, “we”, “us”, or “our”) collects, uses, and protects your personal information when you visit www.zenstay.com or any of our property sites, make a reservation, or otherwise interact with our services. By using our sites, you agree to the practices described in this policy.
Section 01Owner & Data Controller.
Zenstay Inc
1550G Tiburon Blvd #202, Tiburon, CA 94920
Contact: ···
Section 02Types of Data Collected.
We collect the following categories of personal information, either directly or through third-party services:
- Trackers (cookies and similar technologies)
- Usage Data (pages visited, time spent, referral source)
- Number of users and session statistics
- Email address (when submitted via newsletter or contact forms)
- Interaction data: clicks, keypress events, mouse movements, scroll position, touch events, motion sensor events
- Answers to form questions
Unless otherwise specified, all requested data is mandatory. Optional fields are clearly labeled. Users are responsible for any third-party personal information they publish or share through our services.
Section 03Processing & Storage.
We implement appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of your data. Processing occurs using computers and IT tools following organizational procedures aligned with the stated purposes.
Data is processed at our offices and at the locations of our service providers. Depending on your location, data may be transferred to countries outside your residence. See Section 05 for details on third-party processors and their locations.
Personal Data is stored for as long as required by the purposes for which it was collected. It may be retained longer due to applicable legal obligations or your consent. Contract-related data is retained until contract completion. Upon expiration of the retention period, data is deleted.
Section 04Why We Process Data.
We collect and process data to provide our services, fulfill legal obligations, respond to enforcement requests, protect our rights and interests, and detect malicious or fraudulent activity. Specific purposes include:
- Analytics: understanding how visitors use our sites
- Hosting and backend infrastructure
- Spam and bots protection
- Displaying content from external platforms (e.g. maps)
- Email communications (newsletter, booking confirmations)
Section 05Third-Party Services.
We use the following third-party services that may collect and process your data:
Google Analytics 4
Google LLC - United States
Web analytics service enabling traffic analysis and reporting. IP addresses are collected then discarded before data storage. Data processed: number of users, session statistics, trackers, usage data.
Google Maps Widget
Google LLC - United States
Enables map visualization on our pages. Data processed: trackers, usage data. Widgets may collect traffic data even without active engagement.
Google Fonts
Google LLC - United States
Provides typeface visualization services. Data processed: trackers, usage data.
DigitalOcean
DigitalOcean Inc. - United States
Hosting and infrastructure provider for our application and data.
Mailchimp Widget
Intuit Inc. - United States
Email list management service used for newsletters. Data processed: email address, trackers, usage data.
Google reCAPTCHA
Google LLC / Google Ireland Limited - United States & Ireland
Spam and bot protection. Data processed: answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events, trackers, usage data.
Accounting Integration
Intuit Inc. (QuickBooks Online) - United States
We connect our own accounting records to internal tools that we operate. Where those records are held in QuickBooks Online, we use Intuit’s authorized connection to read and write our company’s own bookkeeping data. This connection covers accounts, transactions, invoices, bills, vendors, customers and reports belonging to ZenStay and its affiliated entities.
This integration is internal. It is not offered to guests, owners or any other third party, and no guest or owner information is sent to Intuit through it.
Data retrieved through this connection is stored on infrastructure we control and is used only to prepare our own financial reporting and filings. We do not sell it, we do not share it for advertising, and we do not pass it to any party other than our accountants, our lenders where a filing requires it, and service providers acting on our instructions.
The connection can be revoked at any time from the QuickBooks company settings. On disconnection we stop retrieving data, and any accounting data already retrieved is deleted within 60 days except where we are required to keep it for tax, audit or legal reasons.
Section 06Cookie Policy.
This site uses trackers (cookies and similar technologies). To learn more about the specific trackers used and how to manage your preferences, please read our Cookie Policy.
Section 07EU User Rights (GDPR).
If you are located in the European Union, you have the following rights regarding your personal data:
- Right to withdraw consent: withdraw previously given consent at any time.
- Right to object: object to processing carried out on a legal basis other than consent.
- Right to access: request confirmation of processing and receive a copy of your data.
- Right to rectification: request corrections to inaccurate or incomplete information.
- Right to restrict processing: request that we store data without further processing.
- Right to erasure: request deletion of your data (“right to be forgotten”).
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to lodge a complaint: submit claims to your competent data protection authority.
To exercise these rights, contact us at ···. Requests are free and will be answered within one month.
Section 08US User Rights (CCPA & State Laws).
This section applies to users residing in California and other US states with applicable privacy laws. You have the following rights:
- Right to know: request confirmation and access to your personal information.
- Right to correct: request correction of inaccurate information.
- Right to delete: request deletion of personal information.
- Right to data portability: receive your data in a usable, portable format.
- Right to opt out of Sale or Sharing: we do not sell or share personal information for cross-context behavioral advertising.
- Right to non-discrimination: we will not discriminate against you for exercising privacy rights.
To submit a request, contact us at ···. We will verify your identity and respond within the timeframe required by applicable law.
Section 09Changes to This Policy.
We reserve the right to change this policy at any time by posting an updated version on this page. We recommend checking this page regularly, referencing the “Last updated” date shown in the page header. Changes affecting processing based on your consent will require new consent where required by law.