Privacy Policy

Who We Are

Stayker™ ("Stayker," "Company," "we," "us," or "our") is a hotel booking infrastructure platform operated by WPF Holdings, LLC. We provide hotel search, booking, and reservation management services through our website (stayker.com), booking portals, partner platforms, APIs, and AI-powered integrations including the 1Stay MCP server (collectively, the "Platform").

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform. By using any part of the Platform, you agree to the practices described in this policy.

Information We Collect

Information You Provide

When you make a reservation or interact with the Platform, we may collect:

• Contact information: name, email address, mobile phone number, mailing address
• Booking details: travel dates, destination, number of guests, hotel preferences, special requests
• Loyalty program information: hotel loyalty program membership numbers you provide to earn points on bookings
• Account credentials: if you create a Stayker account, your login information
• Communications: messages you send to us via email, SMS, or through AI-assisted booking conversations

Information Collected Automatically

When you visit our website or use the Platform, we may automatically collect:

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Cookies section below)

Information from AI-Powered Booking Integrations

When you use 1Stay or another AI-powered integration through a third-party AI platform (such as Claude by Anthropic, ChatGPT by OpenAI, or Gemini by Google), we receive only the structured fields submitted through the integration. Hotel searches may include travel dates and hotel preferences. Reservation lookup and support may include limited verification information such as the guest's name, email address, hotel confirmation number, payment card last four digits, and check-in date. Guest identity and payment details required to complete a new booking are collected only on our secure first-party checkout page, not through the AI booking tool. We do not receive or store the full text of conversations that take place inside those third-party assistants.

This is different from our own AI assistants. Conversations with an assistant we operate happen on our systems, and we do retain them. See Our AI Assistants below.

Our AI Assistants

We operate AI assistants on our website, in our booking portals, and in partner event portals. When you chat with one of them, we retain the conversation — including the messages you send, the assistant's replies, and the reservation lookups or bookings it performs on your behalf. These assistants may be presented under different names depending on where you meet them; this section applies to all of them.

We retain these conversations to:

• Provide and complete the service you asked for
• Resolve disputes about a reservation, a cancellation, or a charge
• Detect and prevent fraud and abuse
• Review quality and improve how our assistants work, including by our team reading transcripts, under confidentiality obligations and access controls

Our assistants are powered by third-party AI providers that process your messages in order to generate responses. Those providers act as vendors and do not use your conversations to train their models.

We do not sell these conversations, and we do not use them for advertising. We do not use your personal data to train or fine-tune our own AI models. If that ever changes, we will update this policy first.

Please do not enter full payment card numbers into the chat. Our assistants never ask for them, and payment is always completed on a secure booking page rather than in conversation.

If you have a Stayker account

Some of our products — including group and event housing portals, and bookings made through 1Stay — offer a persistent guest account so you can return to your reservations and pick a conversation back up later. If you have one, your account data, conversations, and reservations are kept for as long as your account exists, so that history is there when you come back.

You stay in control of it. You can ask us to delete an individual conversation, or to delete your account entirely — which permanently removes your account, its conversations, and its saved reservations, normally within 30 days. Email service@stayker.com to make either request. Records we are required to keep by law — for example transaction records, or SMS consent records — are retained as described under Data Retention.

If you do not have an account

If you chat with an assistant without creating an account, there is no profile for the conversation to attach to. Those transcripts are retained for six (6) months and then deleted.

You can ask us to delete your conversation history at any time — see Your Rights below.

How We Use Your Information

We use the information we collect to:

• Process and confirm hotel reservations on your behalf
• Send you booking-related communications including payment links, confirmations, modifications, cancellations, and check-in reminders via email and SMS
• Provide stay-related service information during an active reservation, such as local recommendations, hotel amenities, and concierge assistance
• Submit your loyalty program membership number to the hotel so you earn points on your stay
• Respond to your questions and support requests
• Improve the Platform, develop new features, and analyze usage patterns
• Comply with legal obligations and protect our rights

Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process your personal data on the following legal bases:

• Performance of a contract — to process, confirm, and manage your hotel reservation and provide related services you request.
• Consent — for text (SMS) communications and other optional features. You may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests — to operate, secure, and improve the Platform and to prevent fraud, provided these interests are not overridden by your rights and freedoms.
• Legal obligation — to comply with tax, accounting, telecommunications, and other applicable legal requirements.

Text Messaging (SMS) Communications

When you provide your mobile phone number during the hotel booking process on the Platform — including through our website, booking portals, partner sites, or AI-powered booking integrations such as 1Stay — Stayker may send text (SMS) messages to that phone number. These messages are limited to communications directly related to your hotel reservation and may include:

• Booking payment links: A secure link to complete payment for a reservation you initiated
• Booking confirmations: Your hotel confirmation number, property name, dates of stay, and hotel contact information after payment is completed
• Booking modifications: Updates or changes to an existing reservation you requested, including revised dates, room types, or rate information
• Cancellation confirmations: Confirmation that a reservation has been cancelled at your request, including any applicable cancellation policy details
• Check-in reminders: A reminder prior to your arrival date with your confirmation number and hotel check-in information
• Stay-related service information: During an active reservation, information related to your stay such as local recommendations, hotel amenities, concierge assistance, and on-property services

Consent

By providing your mobile phone number during the booking process and completing a reservation, you consent to receive the text messages described above from Stayker. Your consent is limited to messages related to your reservation and the types of communications described in this section. You are not required to consent to text messages as a condition of making a reservation; however, certain booking workflows may use SMS as the primary delivery method for secure payment links.

No Marketing Messages

Stayker does not send marketing, promotional, or advertising text messages from this number. If Stayker offers promotional text messaging in the future, it will require a separate, explicit opt-in and will not be sent to your phone number based on the consent described in this section.

How We Share Your Information

Hotel & Lodging Providers

When you make a reservation, we share your name, contact information, travel dates, and any special requests with the hotel or lodging provider to fulfill your booking. If you provide a loyalty program membership number, we include that with your reservation so you receive credit for your stay.

Travel Distribution Partners

Stayker processes hotel reservations through travel distribution partners. Your booking data is transmitted to our distribution partners to search inventory, confirm rates, and process reservations. Stayker is the agency of record for all bookings made through the Platform.

Service Providers

We use third-party service providers to operate the Platform, including:

• A third-party messaging provider — for delivery of text (SMS) messages. Your phone number is shared with this provider solely for message delivery.
• Cloud infrastructure providers — for hosting and data processing infrastructure
• Payment processors — for secure processing of booking payments
• CRM and marketing providers — for managing inquiries, lead-capture forms, and event-related communications

Legal Requirements

We may disclose your personal information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We Do Not Sell Your Data

Stayker does not sell, rent, or lease your personal information to third parties. We do not share your phone number, email address, or booking data with any third party for their marketing purposes.

Cookies & Tracking

Our booking platform uses cookies and similar technologies. Strictly necessary cookies enable core functionality such as navigation and completing a reservation. We also use analytics cookies to understand site traffic and usage patterns.

We use a consent management tool to obtain your consent for non-essential (including analytics) cookies before they are set, where consent is required — including for visitors in the European Economic Area and United Kingdom. Non-essential cookies are blocked until you opt in, and you can change or withdraw your preferences at any time through the cookie settings on our booking platform. Disabling non-essential cookies will not affect your ability to complete a hotel reservation. Our public marketing pages do not use analytics or tracking cookies.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

• Booking records: Personal information associated with bookings (name, email, phone number) is retained for six (6) months after checkout and then permanently deleted. Anonymized and aggregated booking records (dates, property, revenue) are retained for up to seven (7) years for tax, accounting, and legal compliance purposes
• SMS consent records: Retained for a minimum of five (5) years in compliance with telecommunications regulations and TCPA best practices
• Account information: Retained until you request deletion
• AI assistant conversations (no account): Chat transcripts are retained for six (6) months and then deleted, matching the retention period for the booking records they relate to
• AI assistant conversations (account holders): Retained for as long as your account exists, so your history is available when you return. Deleted when you delete the conversation or your account

You may request deletion of your personal data by contacting us at service@stayker.com. Certain records may be retained as required by law.

Data Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit, encrypted storage, and access controls. Payment card information is processed through PCI-compliant payment processors and is never stored on Stayker's servers. Phone numbers in our event and analytics logs are masked to the last four digits.

International Data Transfers

Stayker is based in the United States, and the personal data we process is stored and processed on infrastructure located in the United States. If you access the Platform from outside the United States — including from the European Economic Area, the United Kingdom, or Switzerland — your personal data will be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

Where such transfers are subject to the GDPR or UK GDPR, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or an equivalent transfer mechanism, in our agreements with the service providers who process data on our behalf. You may contact us at service@stayker.com for more information about these safeguards.

Children's Privacy

Stayker does not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected information from a child under 13 without parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at service@stayker.com.

Your Rights

You may, at any time, contact us to:

• Access the personal data we hold about you
• Correct or update inaccurate information
• Request deletion of your personal data
• Opt out of text messages by replying STOP to any SMS
• Opt out of email communications by using the unsubscribe link in any email
• Express any concern about how we use your data

For residents of the European Economic Area, you may also exercise your rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

For residents of the United Kingdom and Switzerland, equivalent rights apply under the UK GDPR and Swiss data-protection law.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you with the rights described below.

Categories of personal information we collect

• Identifiers — name, email address, mobile phone number, mailing address, account credentials
• Commercial information — reservation and booking history, travel dates, hotel preferences, loyalty program numbers
• Internet or network activity — IP address, device and browser information, pages visited, usage patterns
• Geolocation — approximate location derived from IP address
• Communications — messages you send us by email, SMS, or through AI-assisted booking

We collect this information from you directly, from your use of the Platform, and from the AI-powered integrations you choose to book through. We use it for the purposes described in "How We Use Your Information" and disclose it only to the service providers described in "How We Share Your Information."

Your California rights

• Know / access the categories and specific pieces of personal information we have collected
• Delete personal information we have collected, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Non-discrimination for exercising your rights

Stayker does not sell or share your personal information as those terms are defined under California law, and does not use or disclose sensitive personal information for purposes that require a right to limit. To exercise any of these rights, contact us at service@stayker.com. We will not discriminate against you for doing so.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective" date at the top of this page. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices: