Privacy Policy

1. Introduction

ParaVista Stays, LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Platform").

By using our Platform, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use our Platform. This Privacy Policy should be read in conjunction with our Terms of Service and Cookie Policy.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Location Data: General location based on IP address; precise location only with your consent
• Cookies and Tracking: See our Cookie Policy for details

2.3 Information from Third Parties

• Social Login: If you sign in with Google or other providers, we receive your name and email
• Payment Processor: Transaction status and limited payment details from Stripe
• Identity Verification: We receive verification results from Stripe Identity, including document authenticity confirmation and facial match results
• Guest Screening: We receive screening results from Truvi, including risk assessments (not detailed criminal records)
• Social Platforms: If you connect social accounts (Instagram, TikTok, YouTube), we receive public profile information and metrics
• Integration Partners: If you connect third-party tools, they may send us updated pricing, availability, or booking data

2.4 Biometric Information

For identity verification, we use facial recognition technology:

What We Collect

• Facial geometry extracted from your selfie and ID photo
• Used solely to verify you match your government ID

How It's Processed

• Processed by our verification partner, Stripe Identity
• Biometric data is used for one-time matching
• Not used for ongoing identification or tracking
• Biometric data is never sold, leased, traded, or otherwise used for profit

Retention and Destruction

• Biometric identifiers are permanently destroyed within 30 days of the verification decision
• Verification results (pass/fail) are retained with your account
• You may request deletion of verification data at any time

Your Consent

• By submitting verification, you provide informed, written consent to the collection and processing of your biometric data
• Verification is required to use certain Platform features
• You may withdraw consent by contacting us, though this may affect your ability to use certain features

3. How We Use Your Information

We use your information to:

• Provide Services: Create accounts, process bookings, facilitate partnerships, enable messaging
• Verify Identity: Confirm you are who you claim to be using ID verification through Stripe Identity
• Screen Guests: Conduct background checks through Truvi for host and community safety
• Process Damage Protection: Facilitate Truvi Protection Pro coverage and process claims
• Process Payments: Charge for bookings, pay out hosts and creators, manage refunds
• Calculate Taxes: Display tax amounts at checkout and include in host payouts
• Enable Integrations: Share data with third-party tools you authorize (pricing tools, channel managers, etc.)
• AI-Assisted Evaluation: Evaluate creator profiles using AI analysis of content quality and niche alignment
• Send Communications: Booking confirmations, partnership updates, important notifications via email and SMS
• Improve Our Platform: Analyze usage patterns, fix bugs, develop new features
• Ensure Safety: Prevent fraud, verify identities, enforce our terms
• Personalize Experience: Show relevant listings, remember preferences
• Marketing: Send promotional emails (with your consent); you can opt out anytime. We honor opt-out requests within 10 business days
• Legal Compliance: Respond to legal requests, protect our rights

4. Information Sharing

4.1 With Other Users

• Hosts see guest names and contact information after booking confirmation
• Guests and creators see host names and property details
• Partners in collaborations can see each other's profile information
• Reviews you write are visible to other users

4.2 With Service Providers

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If ParaVista Stays is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.5 We Do Not Sell or Share Your Data

ParaVista Stays does not sell or "share" (as defined by the CPRA) your personal information to third parties for monetary consideration or for cross-context behavioral advertising purposes.

4.6 Third-Party Integrations

Hosts may connect third-party services (pricing tools, messaging platforms, smart locks, etc.) to their ParaVista Stays account. When you authorize a connection:

• You direct us to share specified data with that service
• Shared data may include: listing details, pricing, calendar, reservations, guest information
• Data sharing continues until you disconnect the integration
• Third-party services are governed by their own privacy policies

Your Control

• View connected integrations in your account settings
• Disconnect any integration at any time
• Disconnecting stops future data sharing but does not delete data already shared with third parties

Our Responsibility

• We use secure OAuth 2.0 for all integrations
• We only share data you have authorized
• We are not responsible for how third parties use your data after sharing

5. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this policy. Specifically:

• Account Data: Retained while your account is active and for 3 years after deletion
• Biometric Identifiers: Permanently destroyed within 30 days of the verification decision
• Verification Results: Pass/fail status retained while account is active
• Background Check Results: Risk assessment retained for 3 years; detailed records are not stored by ParaVista Stays
• Booking Records: Retained for 7 years for tax and legal compliance
• Tax Records: Booking tax amounts retained for 7 years for compliance and audit purposes
• Messages: Retained for 3 years or until account deletion
• Payment Data: Retained as required by financial regulations (typically 7 years)
• Integration Logs: API access logs retained for 2 years
• Usage Analytics: Aggregated data retained indefinitely; identifiable data for 2 years

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from marketing emails at any time; reply STOP to opt out of non-essential SMS
• Withdraw Consent: Where processing is based on consent, you may withdraw it

To exercise these rights, contact us at privacy@paravistastays.com. We will respond to verifiable requests within 45 days.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

7.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you in the past 12 months, including:

• Categories of personal information collected
• Sources of that information
• Business purpose for collecting the information
• Categories of third parties with whom we share the information

Categories of Information We Collect

• Identifiers (name, email, phone number, IP address, device identifiers)
• Financial information (payment details processed by Stripe)
• Biometric information (facial geometry for identity verification) — classified as sensitive personal information
• Professional or employment-related information (social media metrics for creators)
• Internet activity (browsing history, usage data)
• Geolocation data (general location from IP; precise location with consent) — precise geolocation is classified as sensitive personal information
• Audio, visual, or similar information (profile photos, property photos, selfies)
• Inferences drawn from other information (preferences, characteristics)

7.2 Right to Correct

You have the right to request correction of inaccurate personal information that we maintain about you. We will use commercially reasonable efforts to correct the information as directed.

7.3 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions (such as completing transactions or legal compliance).

7.4 Right to Limit Use of Sensitive Personal Information

We collect certain categories of "sensitive personal information" as defined by the CPRA, including biometric data and precise geolocation. You have the right to limit the use and disclosure of your sensitive personal information to only what is necessary to perform the Services. To exercise this right, contact us at privacy@paravistastays.com.

7.5 Right to Opt-Out of Sale or Sharing

We do not sell your personal information or "share" it for cross-context behavioral advertising purposes as defined by the CPRA. However, you have the right to direct us not to sell or share your personal information if we ever change this practice.

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights. You will not receive different prices, quality, or service levels for exercising these rights.

7.7 Submitting Requests

To submit a CCPA/CPRA request, contact us at privacy@paravistastays.com. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf by providing a signed, written authorization to the agent and verifying your own identity with us.

8. Cookies and Tracking

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Platform.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments and testing
• Access controls limiting who can access your data
• Secure payment processing through PCI-compliant providers
• Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected users without unreasonable delay and in accordance with applicable state breach notification laws
• Provide details about the nature of the breach, the types of information affected, and steps we are taking to address it
• Offer guidance on steps you can take to protect yourself
• Notify relevant regulatory authorities as required by law

If you believe your account has been compromised, contact us immediately at security@paravistastays.com.

11. Children's Privacy

Our Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete that information promptly.

If you believe we have collected information from a child under 18, please contact us at privacy@paravistastays.com.

12. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer your information internationally, we take steps to ensure it receives an adequate level of protection, including using standard contractual clauses approved by relevant authorities.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our Platform at least 30 days before the changes become effective.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised policy.

14. Contact Information

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

For CCPA/CPRA requests, you may also reach us at the email address above. We will respond to verifiable consumer requests within 45 days.