Skip to main content

Legal

Privacy Policy

Last updated: 1 September 2026

This Privacy Policy explains how GoPlex Consulting Pty Ltd (ABN 77 631 683 040) operating as StayHive collects, uses and protects your personal information. We comply with the Australian Privacy Act 1988 and the 13 Australian Privacy Principles (APPs).

1. Who we are

GoPlex Consulting Pty Ltd operates StayHive (stayhive.com.au), a SaaS platform that helps Australian holiday rental hosts manage calendars, accept direct bookings, and publish AI-discoverable property pages. References to “we”, “us” or “our” in this policy refer to GoPlex Consulting Pty Ltd.

2. What personal information we collect

We may collect the following types of personal information:

  • Account information: Your name and email address when you sign up.
  • Property information: Listing details, photos, pricing and availability that you provide or import from Airbnb or other platforms. Your full street address is stored for operational purposes but only your suburb is shown publicly on your Property Page.
  • Payment information: Guest payment card details are processed directly by Stripe. We do not store card numbers or bank details. Host identity and verification data for Stripe Connect payouts (KYC) is collected and processed by Stripe for payout eligibility.
  • Booking information: Guest names, contact details and booking dates associated with direct bookings made through your property page. Full property address is shared with confirmed guests before check-in.
  • Visitor analytics: When someone views a Property Page, we record a page view with visitor classification (human visitor vs AI bot vs other bot) for aggregated analytics. Plus plan and above hosts can view these stats in their dashboard.
  • AI assistant requests: When an assistant or other machine client hits StayHive machine files or public APIs (for example /llms.txt, property JSON, or the quote API), we log the path, a classified user-agent name, the property slug, and whether a quote was issued. We do not store the requester IP on this log. Rows are kept for 90 days and deleted with the property or account. Hosts can see this activity on Property Pages without a plan upgrade. This is separate from the browser page-view counters above.
  • Usage data: How you interact with the platform (pages visited, features used, error logs), collected via Vercel Analytics and Speed Insights.
  • Local storage: Onboarding progress and UI preferences may be stored in your browser's localStorage to improve your experience.

3. How we collect your information

We collect information in the following ways:

  • When you create an account or fill in forms on our platform.
  • When you import a property listing from Airbnb or another source.
  • When guests complete a booking through your property page via Stripe.
  • Automatically through cookies and usage analytics as you use the service.

4. Why we collect your information

We use your personal information to:

  • Provide and operate the StayHive service.
  • Process direct bookings and payments through Stripe.
  • Send you transactional emails (booking confirmations, conflict alerts).
  • Improve and develop the platform.
  • Comply with legal obligations.
  • Publish your Property Page (including location at suburb level, amenities, photos you upload, and nightly rates you choose to display) so search engines and AI assistants can find and cite it. Unpublishing the page stops that distribution.

We will not use your personal information for direct marketing without your consent.

5. Who we share your information with

We do not sell, rent or trade your personal information to third parties. We share information only with the following service providers who help us operate StayHive:

  • Stripe – payment processing and Connect payouts (US-based, PCI-DSS compliant). Stripe Privacy Policy.
  • Supabase – database and file storage (Sydney region, ap-southeast-2).
  • Resend – transactional email delivery (US-based).
  • Vercel – hosting, CDN, Vercel Analytics and Speed Insights (global infrastructure). Vercel Privacy Policy.
  • Cloudflare – CDN, security and Cloudflare Insights (global infrastructure). We use Cloudflare Turnstile in invisible mode to protect our authentication and sign-up forms from bots; in invisible mode Turnstile runs in the background without showing a visible challenge or requiring you to interact with it. As required for invisible mode, we reference Cloudflare's Turnstile Privacy Addendum. See also the Cloudflare Privacy Policy.
  • Google Maps / Places – host address autocomplete during property setup. Google Privacy Policy.
  • Google Tag Manager / Google Analytics (GA4) – optional; only active when configured. Used for aggregated usage and performance metrics. Google Privacy Policy.

Some of these providers are based outside Australia (including the United States). Where this is the case, we take reasonable steps to ensure they handle your data in accordance with the APPs (APP 8 – cross-border disclosure). Our primary database is hosted in Sydney (ap-southeast-2), but other processors may transfer data offshore as part of their global infrastructure.

6. Your rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or out-of-date information.
  • Request deletion of your account and associated personal data. In Settings → Danger Zone you can schedule account deletion. When you confirm, we cancel any active subscription and your account enters a 30-day grace period before permanent removal. We email you a restore link; you can also restore while signed in during the grace period. Deletion may be blocked until outstanding paid guest bookings are resolved or Stripe Connect balances and in-transit payouts are cleared.
  • Export your data – from Settings → Profile you can download a CSV export of your bookings and property data in your browser. From Settings → Danger Zone you can request a fuller export (bookings, properties, calendar connections and property pages); we email you a secure download link that expires after seven days.
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us at hello@stayhive.com.au.

7. Data retention

We retain your personal information for as long as your account is active and you use StayHive.

Account deletion grace period: When you schedule account deletion, your account enters a 30-day grace period before we permanently remove your live personal data. During this period you may restore your account using the link in our confirmation email. If you do not restore, we purge your profile, properties, bookings, property pages, calendar connections, uploaded photos, stored export files, and authentication credentials after the grace period ends.

We may retain limited operational records in our systems for a short period after purge (for example security logs, webhook processing metadata, or failed third-party cleanup retries) where needed to operate the service securely and reconcile payments.

Financial records exception: When your account is purged, de-identified financial and transaction records (amounts, dates, Stripe payment identifiers, card last four digits – with no guest names, emails or messages) may be retained for up to seven years to meet Australian tax record-keeping obligations (ATO), chargeback and dispute resolution requirements (APP 11.2). These records are stored separately from your live account data and are purged after the retention period.

8. Cookies

We use cookies and similar technologies for session management, authentication, and security (for example Cloudflare Turnstile). Vercel Analytics and Speed Insights collect aggregated page-view and performance data. Where Google Tag Manager / Google Analytics is enabled, they may set cookies or use storage for aggregated analytics and performance measurement. We may also store onboarding progress and UI preferences in your browser's localStorage. We do not use advertising cookies for cross-site tracking. You can disable cookies in your browser settings, but this may affect your ability to use the platform.

9. Children

StayHive is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address associated with your account. Continued use of StayHive after notification constitutes acceptance of the updated policy.

11. Contact us

For privacy enquiries or to exercise your rights, please contact us at: hello@stayhive.com.au