Summary: StayBlock collects only the data needed to deliver the service. We do not sell your data. Hotel guest data is processed only as instructed by you (the hotel). You can request deletion at any time by emailing
admin@rsbi.co.za.
1. Who We Are
StayBlock is operated by RS Business Investments (Pty) Ltd, registration number 2014/092575/07, VAT number 4950269078, registered in South Africa ("StayBlock", "we", "us").
Contact: admin@rsbi.co.za
2. What Data We Collect
From hotels (account holders):
- Name, email address, hotel/property name, and contact details provided during signup or via the contact form
- PMS connection credentials (API keys or tokens) required to integrate with your Property Management System
- Reservation and room availability data from your PMS, used exclusively to identify optimization opportunities
- Revenue and booking data for performance tracking and billing purposes
From hotel guests (processed on your behalf):
- Guest names and room assignment data, solely to facilitate room reshuffling suggestions
- We act as a data processor for guest data — the hotel remains the data controller
From website visitors:
- Email addresses submitted via demo request or contact forms
- Standard server logs (IP address, browser, pages visited) retained for 90 days
3. How We Use Your Data
- To deliver the StayBlock optimization service
- To generate room reshuffling recommendations within your PMS
- To calculate and invoice the performance-based fee
- To communicate service updates, billing notices, and support
- To improve the platform (using anonymized, aggregated data only)
We do not use your data for advertising. We do not sell your data to third parties.
4. Data Storage & Security
Data is stored on Supabase infrastructure hosted on AWS (eu-west-1 region). All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is restricted to authorized StayBlock personnel only.
PMS credentials are stored encrypted and are never logged in plaintext.
5. Data Retention
- Account data: retained for the duration of the contract, plus 12 months after termination
- PMS reservation data: retained for 24 months for reporting and audit purposes
- Contact form submissions: retained for 12 months
- You may request earlier deletion at any time
6. Third-Party Services
We use the following sub-processors:
- Supabase — database and authentication (supabase.com)
- Cloudflare — website hosting and CDN (cloudflare.com)
- Paystack — payment processing (paystack.com)
Each sub-processor is bound by data processing agreements consistent with applicable privacy law.
7. Your Rights
You have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing
- Request a portable copy of your data
To exercise any of these rights, email admin@rsbi.co.za. We will respond within 30 days.
8. Cookies
StayBlock uses only essential cookies required for authentication (login session management). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. Changes to This Policy
We will notify registered users by email of any material changes to this policy at least 14 days before they take effect. The latest version is always available at stayblock.com/privacy.
10. Contact
For privacy-related queries: admin@rsbi.co.za
RS Business Investments (Pty) Ltd, South Africa — Reg No: 2014/092575/07