Privacy, stated plainly

What this site does with information

This is the website for LuxStay, a product for owners and managers of staffed villas. You can reach the people behind it at [email protected]. A person reads the inquiries and that mailbox and replies; we do not promise how quickly.

Inquiry information

The inquiry form collects your name, your email address, the villa or company you type, where the villa is and, if given, a link to the villa, and anything you add in the note. It exists so a person at LuxStay can read your message and reply to you about your villa. There is no marketing list. We use the villa’s name, where it is and the link to look at the villa, including its public listings on sites such as Airbnb or VRBO, before we reply.

A record can hold more than the form shows. These optional choices are also accepted and stored: the role you are in (owner, property manager, general manager, staff supervisor, agency or consultant, or other); the island the villa is on; how many villas you look after (1, 2–4, 5–9 or 10+); how many staff you have (0–3, 4–9, 10–24 or 25+); what takes up most of your time (guest requests, housekeeping, maintenance, owner reporting, receipts and finances, staff communication, or too many tools); a budget range (under US$5k, US$5–15k, US$15–40k, US$40k+, or not sure); and when you would want to start (ready now, this quarter, within a year, or just exploring). The public form does not show them, but the endpoint accepts them and the record stores them. Anything not given is stored empty.

If a link you followed carried campaign tags, the five tags (utm_source, utm_medium, utm_campaign, utm_content and utm_term) are attached to the inquiry when it is submitted. A separate source value of up to 60 characters is stored too; it is not one of the campaign tags. The submission reference your browser keeps while you fill the form, up to 64 characters, is stored with the record as well; it is a second identifier, and the reference shown to you after a send is the record's own id, not this one.

No inquiry is stored unless the send carries your agreement; it is required. Sending the form is that agreement: a line under the button reads “Sending this stores your name, email, the villa’s name, where it is, the link if you add one, and your message, so we can look at your villa and reply.” and the form sends the agreement with every submission. The agreement itself is not kept as a field of its own.

A reference appears after storage succeeds. If confirmation fails, retrying the same submission retrieves its existing reference. A changed submission under an already saved reference is flagged so you can choose to submit a new version.

Sending the form sends you no automatic email and books no meeting. The site writes the inquiry record, and a first entry in its history saying when it arrived, into the database. Within a few minutes a separate job on the same server emails LuxStay's own mailbox a notice of the inquiry, so that a person sees it: your name, email address, villa or company, where the villa is and the link if you gave one, and note, the inquiry's reference and time, and the source value and any campaign tags that came with it. A person replies by hand from the Gmail mailbox [email protected].

The desk can work on the record afterwards: add notes, set a stage, mark the inquiry as qualified or not, add a next action and the day it is due, and keep a short history of those changes. The desk can also add a person by hand — a name, an email, a business and a note — for someone who never sent the form.

Basic website activity

This site records page-view and form-start events. Each row holds the time, the kind of event, the page category, and a browser-session reference hashed on the server, or the word anon when the submission carried no session reference. Counts are interactions, not unique visitors. The contents of the contact form are not included in these events, and these rows have no expiry and no delete operation today.

The browser keeps a random session reference in session storage, used for the activity rows and for the chat, and it keeps the in-progress submission reference in session storage too; both references are in session storage, not local storage. Closing the window normally clears session storage, so the browser's copies of both references are gone then. A submission reference that was stored with an inquiry record is not removed by closing the window; it stays in the database until that record is deleted by hand.

Questions you ask Lexi

The home page has a chat where you can ask Lexi a question about LuxStay. On this site Lexi answers on this server, from answers we have written and checked. Your question is not sent to any AI service. Like every request to this site, it reaches this server through Cloudflare’s network, as described below. When none of the written answers fits, Lexi says so and points you to the demo instead of guessing. If many questions arrive at once you may be asked to wait a minute and ask again; a question turned away like that is not saved.

The site's software also contains a mode in which a model words the reply from those same written answers. It is switched off here, and the server will not start it while this page says so. If it is ever switched on, this page will be changed first, to name the services that would receive your question.

We save your question, the id of the written answer it was matched to, whether it matched, the time, the same hashed session reference — or anon when there was no session reference — and a marker that the written answers, not a model, produced the reply. The reply text is not saved, because it is one of the written answers and the id identifies it. We keep the most recent 2,000 questions and delete older ones; the desk can read the latest hundred. We do not ask for your name or email in the chat, but anything personal you type there is saved, so please do not include personal details.

Where it is kept

The information is kept in a database file on the computer that runs this site; the same process serves the desk that reviews and can export the inquiries, and the published site cannot open the desk. There are no advertising pixels and no outside analytics.

Requests to the site arrive through Cloudflare's network, which therefore sees the visitor's address and the request. This server writes down neither the address nor the browser's identification. A reply is written by a person from the Gmail mailbox [email protected], so that reply, and whatever of your message it quotes, passes through Google's mail service. So does the notice of your inquiry that the site sends to that mailbox. Booking a call happens on Google Calendar, not on this site: what you enter there is held by Google in LuxStay's calendar, where we read it, and this site never receives it.

Access and retention

Inquiries are kept until they are deleted by hand; nothing expires automatically and there is no self-service deletion. The chat keeps the most recent 2,000 questions, as described above.

If you write to [email protected], inquiry rows can be found from your name and email, together with the notes the desk has added to them. The activity rows and the chat rows carry no name or email and cannot be found from a request. Deletion is a manual edit in the database; the product has no delete button.