Operator and privacy contact

StayFast is operated by Patryk Basic.

Legal correspondence address: Luxemburgo 2, 03710, Calp; Spain .

NIF: Z3536829D.

Contact, support and personal-data rights: stayfast@brag.es.

Service details

If signed in, open your profile, choose Delete account, reauthenticate with your current password and enter DELETE exactly. A recorded request/status is not confirmation of final erasure. If you cannot sign in, contact stayfast@brag.es; access to the app or the current password is not a blanket condition for statutory data rights.

Where the request is still cancellable, the app asks for password reauthentication and the exact confirmation CANCEL. Successful cancellation revokes sessions. A completed irreversible erasure cannot be undone by cancelling a request.

We review outstanding bookings, settlements, disputes and applicable retention duties. Necessary retained records are restricted to the justified purpose; pseudonymisation is not treated as anonymous data or complete erasure. We explain any applicable limitation and distinguish completion from an acknowledgement.

Retention

Account, profile and host legal-profile data are kept while the account and its requested service are in use. An account-closure or erasure request triggers a case review of each category: identity/profile, content, media, booking records, disputes and security. Data with no remaining justified purpose are deleted or irreversibly anonymised without undue delay once that review clears them; pseudonymisation is not erasure.

Booking and communication records needed for an outstanding stay, complaint, legal duty or a concrete claim are restricted to that purpose. We record the reason for retaining them and review it when the stay or case closes, the duty ends or a preservation requirement changes. The same test applies to the host's private legal address and business details; an unapproved or closed listing is not a reason to retain its entire profile indefinitely.

Closed support cases and routine security logs are reviewed manually at case or incident closure and in a monthly retention review. We remove material no longer needed for a documented follow-up, security investigation, legal duty or concrete claim. An exception identifies the data concerned, its reason and its next review trigger; it does not permit unrelated records to be kept indefinitely.

Encrypted recovery copies are not used as the active customer database. We review each generation after a successful replacement copy and after closing the deployment or incident for which it was kept. Obsolete generations are removed once no longer needed for recovery or a documented preservation reason. Before a restored system reopens, applicable erasure and restriction decisions are reapplied. There is no promise of automatic deletion of all backups after 30 days.

Erasure requests are handled with human review and the necessary recorded clearances; an acknowledgement or a queued task is not proof of completed deletion. No automatic purge service or blanket 30-day erasure, 12-month support or 30-day backup schedule is represented as operating. Financial records have no invented universal period; any applicable statutory period is determined for the actual record and obligation.

Your data rights

For personal-data matters, contact only stayfast@brag.es. We act without undue delay and inform you of the action on a rights request within one month of receipt. Where the law permits an extension because of complexity or the number of requests, we explain it and its reasons within that first month. This is the statutory response framework, not a promise that every record is erased within 30 days. Identity checks are proportionate, without routinely requiring an identity document.

The app's scheduled account-closure flow has a grace period of at least 30 days from the request. While closure is still reversible and anonymisation has not been committed, you may cancel it using the available account action. Passing that period makes the request eligible for reviewed processing; it does not prove automatic or completed deletion. This product grace period is neither the statutory one-month response period nor a general postponement of erasure rights: you may contact stayfast@brag.es separately to exercise those rights without waiting for the app schedule.

You may complain to Spain's Agencia Española de Protección de Datos (AEPD) or another competent EEA supervisory authority as applicable; this information does not restrict you to an exclusive Spanish forum. Contact for data rights remains stayfast@brag.es; no unconfirmed data protection officer is presented.

Versions and changes

The approved document identifies its version and effective date. For new accounts we retain the accepted version, language, time and user linkage. We do not attribute acceptance events to earlier users where none occurred. Changes requiring renewed acceptance will be presented separately, preserving users' rights.