Legal
Effective date: March 20, 2026 · Last updated: March 20, 2026
This Privacy Policy explains how Pikstay, Inc. collects, uses, and shares information when you use our website, mobile application, and related services. By using Pikstay, you agree to the practices described in this policy.
We collect information you provide directly (name, email, trip searches, payment info via Stripe), information collected automatically (device info, usage data, IP address, cookies), and information from social login providers (Google, Apple, X, Facebook).
We use your information to provide and improve the service, process searches and bookings, send price alerts you've requested, communicate about your account, and detect fraud. We do not sell your personal data to advertisers.
Pikstay earns commissions when you book accommodations through our platform. This includes on-site bookings via Expedia Rapid API (5–14% commission) and referrals to Airbnb via DCMnetwork (25% of service fee). Our AI recommendations are based on match quality — not commission rates.
You have the right to access, correct, delete, and export your personal data. To exercise these rights, email privacy@pikstay.com. We will respond within 30 days. You can unsubscribe from marketing emails at any time.
EU/EEA residents have additional rights under GDPR. California residents have rights under CCPA including the right to know what data we collect and to opt-out of data sales (note: we do not sell personal information). Contact privacy@pikstay.com for requests.
We use TLS 1.3 encryption in transit, AES-256 at rest, bcrypt password hashing, and PCI DSS compliance via Stripe for payments. Report security vulnerabilities to security@pikstay.com.
Questions about this policy? Email privacy@pikstay.com or write to Pikstay, Inc., Privacy Team, United States. We aim to respond within 30 days.