Privacy & record-retention notice

AaronStay collects account, contact, booking, food-order, payment-reference, business-listing and partner-attribution information needed to operate the marketplace. Only information reasonably required for fulfilment, support, payment processing, security and compliance should be shared with participating businesses/providers.

OTP & abuse-protection records

Email, SMS and WhatsApp verification events may record channel, masked destination, time, success/failure state, failed-attempt count, and privacy-preserving hashes associated with IP/device activity. The readable OTP itself is not retained; a one-way password hash is used for verification. Requests across enabled channels are rate-limited and abnormal activity may generate security flags.

Promoter attribution

AaronStay may use first-party promoter codes/cookies to attribute a booking or food promotion. A code used in a qualifying transaction is stored with that transaction so later changes do not alter the recorded attribution.

Social-media source links

Food Spot introduction records may contain public Instagram/Facebook/YouTube or other source URLs supplied as discovery references. Such links remain references to third-party content and are not treated as ownership of that content.

Financial/document retention

Booking-document snapshots, commission records, wallet transactions, withdrawals and related financial audit records are designed to be retained for at least 8 financial years. The wallet's quick date selector covers the latest 24 months per PDF request; older retained records may be exported in separate ranges where allowed.

Before public launch, add your legal entity's full privacy contact/grievance details, payment-provider disclosures, retention schedule for non-financial security logs and all notices/consents required by applicable law.