Privacy notice

1. Data controller

ELUL SHALOM, S. de R.L. de C.V., trading as StayMX, located in Mexico, is responsible for the processing of your personal data.

For anything related to this notice, write to privacidad@staymx.com.

2. Personal data we collect

Depending on how you use StayMX, we may collect:

• Identification and contact details: name, email address, phone or WhatsApp number.
• Details of your stay or request: destination, dates, budget, the type of housing or service you're looking for, and the messages you send us.
• Account data: email and password (stored encrypted) if you create an account.
• If you list a property or a service: business name, contact details, location, description and photos.
• Community posts (Pulse): the content, name and photo you choose to post, which are publicly visible.
• Technical data: push-notification subscription identifier and browser type, if you turn notifications on.
• Payments: if you buy a paid service, Stripe processes the charge. StayMX never receives or stores your card details.

We don't ask for sensitive personal data. Please don't include health, immigration status or other sensitive information in your messages unless your request requires it; if you do, we'll use it only to handle that request.

3. Purposes

Primary purposes, necessary for the service you request:

• Answering your questions and requests through the site, email or WhatsApp.
• Connecting you with landlords, service providers or local connectors when you ask us to.
• Creating and managing your account, plans and posts.
• Verifying and publishing properties and providers.
• Processing payments for paid services and meeting legal and tax obligations.
• Keeping the service secure and preventing abuse.

Secondary purposes, not necessary for the service:

• Sending you our newsletter, news and recommendations.
• Producing internal statistics to improve StayMX. These statistics don't include the content of your messages.

If you don't want your data used for secondary purposes, write to privacidad@staymx.com or reply to any of our emails asking to be removed. Opting out won't affect the service you asked for.

4. Transfers and processors

We share your data without asking for further consent only when it's needed to handle your request: with the landlord, provider or local connector you asked us to put you in touch with.

We also rely on providers that process data on our behalf and under our instructions. Some are located outside Mexico:

• Supabase — database and authentication.
• Vercel — website hosting.
• Resend — email delivery.
• Stripe — payment processing.
• Meta (WhatsApp) — messaging, when you contact us on WhatsApp.
• Anthropic — message processing to help us understand and answer requests.

We don't sell your personal data.

5. Your ARCO rights

You have the right to access, rectify and cancel your data, and to object to its processing (ARCO rights). To exercise them, send a request to privacidad@staymx.com including:

• Your name and a way to contact you.
• A copy of your official ID, or documents proving legal representation if applicable.
• A clear description of the data and the right you want to exercise.
• Any document that helps us locate your data.

We'll reply within 20 business days. If the request is granted, we'll carry it out within 15 business days of our reply.

6. Withdrawing consent and limiting use

You can withdraw your consent or limit the use of your data by writing to privacidad@staymx.com, following the same procedure as above. You can also leave the newsletter at any time by replying to any of our emails, and turn off notifications from your browser or account.

Withdrawal isn't retroactive, and in some cases we may need to keep certain data to meet legal obligations.

7. Cookies and similar technologies

We use our own strictly necessary cookies to keep you signed in and remember your language. We don't use third-party advertising or tracking cookies. You can delete or block cookies in your browser, though some features may stop working.

8. Retention

We keep your data for as long as needed for the purposes above and for any period required by law. After that, we delete or anonymize it.

9. Minors

StayMX isn't directed at anyone under 18, and we don't knowingly collect their data.

10. Changes to this notice

We may update this notice. We'll post any change on this page along with the date of the last update.

If you believe your rights have been violated, you can go to the competent personal-data protection authority.