Privacy PolicyTerms of UseData DeletionWhatsApp numbers we operateTürkçe
Data entered into the system by the hotel, or shared by the guest during a conversation:
| Data | Why it is needed |
|---|---|
| Full name | To address the guest by name |
| Mobile phone number | The address the WhatsApp message is sent to |
| Room number | To connect the request to the correct room |
| Check-in / check-out dates | To send messages at the right time |
| Message content | To understand and answer the request |
| Request records (orders, reservations, work orders, feedback) | So hotel staff can carry out the work |
| Language preference | To reply in the guest's own language |
Data we do not process: identity or passport numbers, payment card details, invoice and folio amounts, nationality. When guest lists are imported from a hotel system, these fields are filtered out in the browser and never reach our servers.
Processing is carried out under the Turkish Personal Data Protection Law No. 6698 (KVKK) on the following grounds:
| Recipient | Purpose | Location |
|---|---|---|
| Meta Platforms (WhatsApp Business Cloud API) | Message delivery | Outside Türkiye |
| OpenAI | Response generation and text analysis | Outside Türkiye |
| Hetzner Online GmbH | Server hosting | Germany (Nuremberg) |
| Sentry | Error monitoring (personal data scrubbed) | Outside Türkiye |
These transfers are technically required in order to provide the service. Data is never used for advertising, never sold and never marketed to third parties. It is not used to train models.
Guest data is retained for as long as the hotel's contract with STAYA remains in force. When the contract ends, the hotel's data is deleted within 30 days upon request. A hotel may request deletion of an individual guest's data at any time.
A guest has the right to learn whether their data is being processed, to request information about it, and to request its correction or deletion. Because the hotel is the data controller, such requests should be addressed to the hotel first; once the hotel passes the request on to us, we carry it out technically. You may also write to us directly — see Data Deletion.
When this policy is updated, the new version is published on this page and the date above changes.