Privacy

What we collect

EriStay collects the information needed for current trip and local-service requests, such as name, contact details, travel dates, destination, apartment interest, selected services, and provider choices. We also process formal traveler complaints and provider-member operational reports. Records from retired request forms may remain in a protected historical archive.

How we use it

We use this information to respond to requests, coordinate with the responsible EriStay team at the destination, confirm availability, arrange services, help complete the official Egypt e-Visa application form online when requested, and improve the service workflow.

Visa form help

Visa help is requested as a service attached to your trip. The current public request flow does not collect passport images. If documents are required later, an authorised EriStay representative must explain the purpose and provide the current secure process. EriStay does not guarantee visa approval, border entry, airline acceptance, or government processing time.

What not to submit

Do not send passport images through retired request links or over WhatsApp. Do not submit payment card details, bank login information, or sensitive medical information through EriStay request forms. Guest ID for apartment check-in is confirmed in person with the ground contact when needed.

Where data is stored

EriStay uses Supabase for database, authentication, apartment images, restricted service documents, and protected historical records. Our Supabase project is hosted in the EU region in Zurich. Access to guest and sensitive document information is limited by role to authorised people who need it for the current service or approved record handling.

Cookies and browser storage

EriStay uses essential browser storage to remember basic choices such as your language preference, saved trip draft, privacy choice, and secure session. Optional first-party analytics starts only after you actively allow it. EriStay does not use advertising pixels or third-party marketing trackers.

When allowed, analytics records a random visitor and session identifier, language, page path, selected origin and destination country, browser notification permission, funnel stage, apartment or service selection, and whether a request succeeded or failed. It never records names, email addresses, phone numbers, messages, passport information, full query strings, or a staff browsing history. Raw events expire after 180 days, staff see aggregate reports, and withdrawing permission deletes events linked to that random visitor identifier.

Operational request data

When a signed-in guest submits a request, EriStay stores the account identity, preferred interface language, browser notification permission at submission, and destination with that request. Authorized HQ staff and the responsible destination office can see this information because they need it to deliver the requested service. It is protected operational data and is not joined to the guest's anonymous browsing events.

Voluntary needs check-in

The one-time needs check-in stores the topics you select, your optional written answer, origin and destination, and interface language so EriStay HQ can understand what families need. If you ask for help, it also stores the name and email or WhatsApp number you provide so authorized HQ staff can follow up. We do not contact you unless you request it. Do not include passport, payment, or sensitive medical information.

Verified-stay reviews

A signed-in guest may review only an apartment trip completed through their own account. EriStay stores the link to that trip privately to prevent fabricated reviews. If approved, the rating, review text, optional city and country, and guest display name are public; the account ID and trip link are never public. Rejected reviews remain private for moderation and audit purposes.

Operational notifications

If a signed-in user enables device alerts, EriStay stores the account ID, a device push endpoint, encrypted subscription keys, limited browser and device information, preferred language, and delivery results. We use these only for request, complaint, assignment, and service-status updates, including while the app is closed. Lock-screen messages are deliberately general and do not include contact, passport, complaint-detail, or payment information. Push delivery may pass through the browser or operating-system push service. Device alerts are separate from optional analytics and can be disabled in EriStay or browser settings.

Data retention

Current request, complaint, and report records are retained only as needed for service, safety, accounting, and legal duties. Historical passport documents, if any, remain restricted and outside the active workflow until EriStay completes a separate documented retention and deletion review.

Legal basis and consent

We process request information so we can provide the service you ask for. Sensitive documents may be requested only for a clear service purpose, with explicit consent and the current secure document process.

Processors and partners

EriStay may use service providers such as Supabase for secure hosting and storage. If another trusted helper or partner needs access to complete the requested service, they may only use the information for that request and must not keep it after the work is finished.

Contact

For privacy questions, contact EriStay through the live chat on the site.