Privacy Policy

Who We Are

Stayker™ ("Stayker," "Company," "we," "us," or "our") is a hotel booking infrastructure platform operated by WPF Holdings, LLC. We provide hotel search, booking, and reservation management services through our website (stayker.com), booking portals, partner platforms, APIs, and AI-powered integrations including the 1Stay MCP server (collectively, the "Platform").

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform. By using any part of the Platform, you agree to the practices described in this policy.

Information We Collect

Information You Provide

When you make a reservation or interact with the Platform, we may collect:

• Contact information: name, email address, mobile phone number, mailing address
• Booking details: travel dates, destination, number of guests, hotel preferences, special requests
• Loyalty program information: hotel loyalty program membership numbers you provide to earn points on bookings
• Account credentials: if you create a Stayker account, your login information
• Communications: messages you send to us via email, SMS, or through AI-assisted booking conversations

Information Collected Automatically

When you visit our website or use the Platform, we may automatically collect:

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Cookies section below)

Information from AI-Powered Booking Integrations

When you use 1Stay or other AI-powered integrations to search for or book hotels through third-party AI platforms (such as Claude by Anthropic, ChatGPT by OpenAI, or Gemini by Google), we receive the structured booking data you provide during the conversation — including your name, email, phone number, travel dates, and hotel preferences. We do not receive or store the full text of your AI conversation. We receive only the specific data fields submitted through the booking tool.

How We Use Your Information

We use the information we collect to:

• Process and confirm hotel reservations on your behalf
• Send you booking-related communications including payment links, confirmations, modifications, cancellations, and check-in reminders via email and SMS
• Provide stay-related service information during an active reservation, such as local recommendations, hotel amenities, and concierge assistance
• Submit your loyalty program membership number to the hotel so you earn points on your stay
• Respond to your questions and support requests
• Improve the Platform, develop new features, and analyze usage patterns
• Comply with legal obligations and protect our rights

Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process your personal data on the following legal bases:

• Performance of a contract — to process, confirm, and manage your hotel reservation and provide related services you request.
• Consent — for text (SMS) communications and other optional features. You may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests — to operate, secure, and improve the Platform and to prevent fraud, provided these interests are not overridden by your rights and freedoms.
• Legal obligation — to comply with tax, accounting, telecommunications, and other applicable legal requirements.

Text Messaging (SMS) Communications

When you provide your mobile phone number during the hotel booking process on the Platform — including through our website, booking portals, partner sites, or AI-powered booking integrations such as 1Stay — Stayker may send text (SMS) messages to that phone number. These messages are limited to communications directly related to your hotel reservation and may include:

• Booking payment links: A secure link to complete payment for a reservation you initiated
• Booking confirmations: Your hotel confirmation number, property name, dates of stay, and hotel contact information after payment is completed
• Booking modifications: Updates or changes to an existing reservation you requested, including revised dates, room types, or rate information
• Cancellation confirmations: Confirmation that a reservation has been cancelled at your request, including any applicable cancellation policy details
• Check-in reminders: A reminder prior to your arrival date with your confirmation number and hotel check-in information
• Stay-related service information: During an active reservation, information related to your stay such as local recommendations, hotel amenities, concierge assistance, and on-property services

Consent

By providing your mobile phone number during the booking process and completing a reservation, you consent to receive the text messages described above from Stayker. Your consent is limited to messages related to your reservation and the types of communications described in this section. You are not required to consent to text messages as a condition of making a reservation; however, certain booking workflows may use SMS as the primary delivery method for secure payment links.

No Marketing Messages

Stayker does not send marketing, promotional, or advertising text messages from this number. If Stayker offers promotional text messaging in the future, it will require a separate, explicit opt-in and will not be sent to your phone number based on the consent described in this section.

How We Share Your Information

Hotel & Lodging Providers

When you make a reservation, we share your name, contact information, travel dates, and any special requests with the hotel or lodging provider to fulfill your booking. If you provide a loyalty program membership number, we include that with your reservation so you receive credit for your stay.

Travel Distribution Partners

Stayker processes hotel reservations through travel distribution partners. Your booking data is transmitted to our distribution partners to search inventory, confirm rates, and process reservations. Stayker is the agency of record for all bookings made through the Platform.

Service Providers

We use third-party service providers to operate the Platform, including:

• A third-party messaging provider — for delivery of text (SMS) messages. Your phone number is shared with this provider solely for message delivery.
• Cloud infrastructure providers — for hosting and data processing infrastructure
• Payment processors — for secure processing of booking payments
• CRM and marketing providers — for managing inquiries, lead-capture forms, and event-related communications

Legal Requirements

We may disclose your personal information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We Do Not Sell Your Data

Stayker does not sell, rent, or lease your personal information to third parties. We do not share your phone number, email address, or booking data with any third party for their marketing purposes.

Cookies & Tracking

Our booking platform uses cookies and similar technologies. Strictly necessary cookies enable core functionality such as navigation and completing a reservation. We also use analytics cookies to understand site traffic and usage patterns.

We use a consent management tool to obtain your consent for non-essential (including analytics) cookies before they are set, where consent is required — including for visitors in the European Economic Area and United Kingdom. Non-essential cookies are blocked until you opt in, and you can change or withdraw your preferences at any time through the cookie settings on our booking platform. Disabling non-essential cookies will not affect your ability to complete a hotel reservation. Our public marketing pages do not use analytics or tracking cookies.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

• Booking records: Personal information associated with bookings (name, email, phone number) is retained for six (6) months after checkout and then permanently deleted. Anonymized and aggregated booking records (dates, property, revenue) are retained for up to seven (7) years for tax, accounting, and legal compliance purposes
• SMS consent records: Retained for a minimum of five (5) years in compliance with telecommunications regulations and TCPA best practices
• Account information: Retained until you request deletion

You may request deletion of your personal data by contacting us at service@stayker.com. Certain records may be retained as required by law.

Data Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit, encrypted storage, and access controls. Payment card information is processed through PCI-compliant payment processors and is never stored on Stayker's servers. Phone numbers in our event and analytics logs are masked to the last four digits.

International Data Transfers

Stayker is based in the United States, and the personal data we process is stored and processed on infrastructure located in the United States. If you access the Platform from outside the United States — including from the European Economic Area, the United Kingdom, or Switzerland — your personal data will be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

Where such transfers are subject to the GDPR or UK GDPR, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or an equivalent transfer mechanism, in our agreements with the service providers who process data on our behalf. You may contact us at service@stayker.com for more information about these safeguards.

Children's Privacy

Stayker does not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected information from a child under 13 without parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at service@stayker.com.

Your Rights

You may, at any time, contact us to:

• Access the personal data we hold about you
• Correct or update inaccurate information
• Request deletion of your personal data
• Opt out of text messages by replying STOP to any SMS
• Opt out of email communications by using the unsubscribe link in any email
• Express any concern about how we use your data

For residents of the European Economic Area, you may also exercise your rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

For residents of the United Kingdom and Switzerland, equivalent rights apply under the UK GDPR and Swiss data-protection law.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you with the rights described below.

Categories of personal information we collect

• Identifiers — name, email address, mobile phone number, mailing address, account credentials
• Commercial information — reservation and booking history, travel dates, hotel preferences, loyalty program numbers
• Internet or network activity — IP address, device and browser information, pages visited, usage patterns
• Geolocation — approximate location derived from IP address
• Communications — messages you send us by email, SMS, or through AI-assisted booking

We collect this information from you directly, from your use of the Platform, and from the AI-powered integrations you choose to book through. We use it for the purposes described in "How We Use Your Information" and disclose it only to the service providers described in "How We Share Your Information."

Your California rights

• Know / access the categories and specific pieces of personal information we have collected
• Delete personal information we have collected, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Non-discrimination for exercising your rights

Stayker does not sell or share your personal information as those terms are defined under California law, and does not use or disclose sensitive personal information for purposes that require a right to limit. To exercise any of these rights, contact us at service@stayker.com. We will not discriminate against you for doing so.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective" date at the top of this page. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices: