How we keep your data safe
Stay & Save is built on infrastructure trusted by millions of businesses. Payments, authentication, and data storage are handled by industry-standard, audited providers.
Payments processed by Stripe
Every payment on Stay & Save is handled by Stripe, a Level 1 PCI Service Provider — the highest level of certification available. Your card details are entered into a Stripe-hosted checkout form and sent directly to Stripe's servers. They never touch ours, and we never see or store them.
Encrypted in transit and at rest
Every page and API call uses HTTPS with modern TLS. Data at rest is stored on infrastructure that encrypts disk contents at the storage layer.
Passwords you never see
Sign in with Google, or use email and password with hashed, salted credentials stored by our auth provider. We can't read your password, and neither can our staff.
Row-level access control
Our database uses row-level security policies so a business can only view and edit its own listings, coupons, and redemptions — enforced at the database layer, not just in the app.
We collect the minimum we need
We only store what's needed to run your listing and process your subscription. We don't sell or share your data with third parties for advertising.
Cancel & export any time
Cancel your subscription from your dashboard — your listing stays live through the end of the billing period, then goes private. Contact us to permanently delete your account and data.
Questions about security? Email us at hello@stayandsave.app or head to the pricing page to get started.