StaySMA

Privacy Policy

Last updated: May 2025

1. Who we are

StaySMA (staysma.com) is a hotel directory for San Miguel de Allende, Mexico. We are responsible for the personal data described in this policy.

Contact: hello@staysma.com

2. Data we collect

  • Account: email address and password (managed by Supabase Auth).
  • Activity: hotels you save as favorites, property claims you submit.
  • Contact forms: name, email, and message when you write to us via a hotel page.
  • Analytics: aggregated, anonymized usage data via Google Analytics 4, only if you accept analytics cookies.
  • Technical cookies: Supabase session cookie required to keep you logged in.

3. How we use your data

  • Provide and improve the service (account management, favorites, claims).
  • Send transactional emails related to your account (signup confirmation, claim approvals).
  • Respond to messages sent through hotel contact forms.
  • Measure traffic and browsing behavior (only with your consent for analytics cookies).

4. Cookies

We use two types of cookies:

  • Essential: Supabase session cookie. Required for site functionality. No consent needed.
  • Analytics (Google Analytics 4): collects anonymous usage data to improve the site. Only activated if you accept in the cookie banner.

You can manage or withdraw your consent at any time via our cookie policy.

5. Data sharing

We do not sell or rent your data. We share it only with necessary service providers:

  • Supabase — database and authentication.
  • Vercel — web hosting.
  • Resend — transactional email delivery.
  • Google Analytics — traffic analysis (consent only).

6. Your rights

If you reside in the EEA, UK, or California, you have the right to access, correct, or delete your data. To exercise these rights, email us at hello@staysma.com.

7. Data retention

We retain account data while the account is active. If you delete your account, we erase your data within 30 days unless legally required to retain it.

8. Changes to this policy

We will notify you of material changes by email or a prominent notice on the site. Continued use of the site after notification constitutes acceptance.