Privacy & Legal

Who we are

StayWall (“StayWall”, “we”, “us” or “our”) provides a live information display service for hospitality and visitor-facing venues. StayWall is operated as a business established in Spain and is the data controller responsible for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, you can reach us at info@staywall.app.

The information we collect

Account and venue data. When you create an account we collect your name, email address, password (stored only as a secure hash) and the details you enter about your venue — such as its name, location, logo, WiFi details and the information you choose to display.

Billing data. When you start a paid subscription, payment is handled by our payments provider, Creem. We receive confirmation of your subscription status and limited billing metadata (such as plan, billing period and the last four digits or brand of your card). We never see or store your full card number.

Usage and technical data. To keep the service running and secure we process technical information such as your IP address, browser type, device information and the pages you visit. On our public website we use Cloudflare Web Analytics, which is privacy-first and does not use cookies or track individuals across sites. In the admin dashboard we additionally use PostHog, a product-analytics service hosted in the European Union, to understand how the dashboard is used — for example which pages are visited and key account milestones such as creating a venue or a screen going live. Guest-facing displays contain no analytics at all: nothing is ever collected about the people viewing a screen.

Communications. If you contact us, complete the contact form, or receive our service emails, we keep a record of that correspondence so we can respond and support you.

How we use your information

We use your information to: provide and operate the StayWall service and your displays; create and manage your account; take payment and manage your subscription through Creem; send you essential service messages (for example about your trial, billing, or account security); provide customer support; keep the service secure and prevent abuse; understand how the admin dashboard is used so we can improve the product; and meet our legal and accounting obligations.

We do not sell your personal data, and we do not use it for advertising or third-party marketing.

Legal bases for processing

Where the UK and EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: performance of our contract with you (to provide the service and your account); our legitimate interests (to keep the service secure, prevent abuse and improve it); compliance with a legal obligation (for example tax and accounting records); and your consent, where we ask for it.

How your information is protected

StayWall is built on Cloudflare’s global infrastructure. Your data is stored in Cloudflare’s managed database, storage and cache services, protected in transit by encryption (HTTPS/TLS) and safeguarded by Cloudflare’s network security. Access to production systems is restricted, and passwords are never stored in plain text.

Any free text or uploads that you enter to show on a public display are sanitised and validated before they are stored or shown, to protect both you and the people viewing your screens.

Service providers we share data with

We share personal data only with the trusted providers we need to run the service, each acting under their own privacy and security commitments: Cloudflare (hosting, database, storage, content delivery and privacy-first analytics); Creem (payment processing and subscription management, acting as merchant of record); PostHog (product analytics for the admin dashboard, hosted in the European Union); and our email delivery providers (Cloudflare Email Service and Resend) for transactional and service emails.

These providers may process data outside the UK or European Economic Area. Where they do, appropriate safeguards — such as the applicable Standard Contractual Clauses — are in place.

Payments

All payments are processed securely by Creem, which acts as the merchant of record for your subscription. Creem handles card processing, invoicing, refunds and payment enquiries, and applies its own security and compliance standards to your payment details. Your full card details are entered directly with Creem and are never transmitted to or stored by StayWall.

How long we keep your data

We keep your account and venue data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we are required to keep certain records (such as billing and tax records) for the period required by law.

Your rights

Depending on your location, you have rights over your personal data, including the right to access it, correct it, delete it, restrict or object to its processing, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at info@staywall.app. You also have the right to lodge a complaint with a data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

Cookies

We keep cookie use to a minimum and use only strictly necessary cookies — never tracking or advertising cookies. Our public site stores your language and light/dark theme choices so the site remembers your preferences, and the admin area uses a cookie to keep you signed in. Our website analytics provider does not set any cookies. In the admin dashboard, our product analytics stores a small identifier in your browser's local storage (not a cookie) so we can recognise your account between visits. Guest-facing displays store nothing and are never tracked.

Children

StayWall is a business service and is not directed at children. We do not knowingly collect personal data from children under 16.

Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page and, where appropriate, notify you by email.