Privacy Policy

1. Information Collected During Registration

• Required: Email address, name, password (encrypted)
• Optional: Phone number, profile photo
• Social Login: Email, name, profile image (provided by social service)

2. Information Collected During Identity Verification (KYC)

• Copy of government-issued ID (passport or national ID)
• Legal name, date of birth

3. Information Collected During Booking & Payment

• Payment method information (card number, digital wallet info — processed through payment gateway)
• Check-in/check-out dates, contact information

4. Information Collected for Host Payouts

• Bank name, account number, account holder name

5. Information Automatically Collected During Service Use

• IP address, device information, browser type
• Service usage records, access logs, cookies

Personal information is promptly destroyed after the retention period expires.

In principle, the Company does not provide users' personal information to third parties. However, the following exceptions apply:

1. When the user has given prior consent
2. Upon booking confirmation: When a booking is confirmed, the guest's name and contact information are provided to the host, and the property address and host contact information are provided to the guest.
3. When required by law: Lawful requests from investigative agencies, court orders, etc.

All outsourcing contracts specify compliance with privacy regulations, confidentiality obligations, and restrictions on sub-outsourcing.

Your personal information may be transferred to and processed in countries outside the Philippines. We ensure that adequate safeguards are in place in accordance with the Data Privacy Act of 2012.

All cross-border transfers are subject to contractual safeguards ensuring a level of data protection comparable to that required by the Data Privacy Act of 2012. You may contact our Data Protection Officer to request further details about these safeguards.

As a data subject, you may exercise the following rights at any time:

• Right to access — request a copy of the personal information we hold about you
• Right to rectification — correct inaccurate or incomplete information
• Right to erasure — delete your account and associated personal data
• Right to object — opt out of marketing communications or specific processing
• Right to data portability — receive your personal data in a structured, commonly used, and machine-readable format (JSON), pursuant to Section 18 of RA 10173

Self-service channels — the following rights can be exercised directly from your Account Settings:

• Download My Data — instantly export your personal data as a JSON file
• Delete Account — submit a deletion request (reviewed by the team)
• Marketing Emails — toggle marketing communications on or off

For access, rectification, or any other requests not covered by the self-service channels, please contact us at help@staymonth.com or through our Customer Support. Requests will be acknowledged without undue delay and responded to within the timeframes required by applicable law.

1. The Company uses cookies to provide personalized services to users.
2. Cookies are small text files sent by the website's server to the user's browser and stored on the user's device.
3. Users may refuse cookie storage through browser settings, but this may limit some service functionality.

The Company implements the following measures to ensure the security of personal information:

• Password encryption: Passwords are stored using bcrypt one-way encryption
• Transmission encryption: Data transmission encrypted via SSL/TLS
• Access control: Minimized staff with access to personal information with managed permissions
• Database security: Access control and encrypted connections

In accordance with the Data Privacy Act of 2012 (RA 10173), the Company has designated the following Data Protection Officer (DPO):

If you need to report or consult about privacy infringement, you may contact the following organizations:

• National Privacy Commission (privacy.gov.ph / (02) 8234-2228)
• Department of Justice — Office of Cybercrime (doj.gov.ph)
• PNP Anti-Cybercrime Group (acg.pnp.gov.ph)
• National Bureau of Investigation — Cybercrime Division (nbi.gov.ph)

StayMonth uses cookies and similar technologies to operate the service, analyze usage, and — with your consent — improve your experience. Cookies are grouped into three categories:

• Strictly necessary: Required for authentication, security, and session management. Cannot be disabled.
• Analytics: Help us understand how visitors use StayMonth. Opt-in only. We may use Google Analytics 4 with IP anonymization and Consent Mode v2.
• Marketing: Used to deliver relevant promotions and measure campaign performance. Opt-in only, and currently not active.

On your first visit, you will be asked to choose your preferences. You can change them at any time by clicking Cookie preferences at the bottom of any page, or by reading our detailed Cookie Policy.

This privacy policy may be amended in accordance with changes in laws or services. Any changes will be announced within the service at least 7 days before the effective date.