KoruStay – Privacy Policy

Last Updated: April 2026

Your privacy is important to us. This privacy policy has been created to demonstrate KORUSTAY LIMITED’s commitment to protecting your personal information in accordance with the New Zealand Privacy Act 2020.

Through our website and platform, KoruStay provides a service for accommodation hosts to create and share digital guest guides, process upsells, and utilize AI concierge tools and automated safety engines. This policy outlines how we collect, use, store, and disclose personal information.

We advise all users to check this page regularly for any updates. Any significant changes may be notified to you via email.

Who this Policy Applies To

This policy applies to all users of the KoruStay service, including:

  • Hosts: Individuals or Property Management Companies (PMCs) who sign up for a KoruStay account to create and manage Digital Guest Guides.

  • Guests: Individuals who access and use a Digital Guest Guide, interact with our AI tools, receive safety alerts, or purchase Upsell Items.

  • Service Providers (“Fixers”): Tradespeople, cleaners, or contractors participating in the KoruWorks marketplace.

  • Advertisers & Partners: Businesses providing local guide information or participating in our B2B wholesale network.

  • Website Visitors: Anyone who browses our public website, korustay.co.nz.

Information We Collect

We collect information in the following ways:

1. Information you provide directly to us

  • For Hosts: When you sign up, we collect your name, email address, and account password. To provide the service, we also collect the content you submit for your guide (“Host Content”), which may include property details, contact information, and images.

  • For Guests: If you opt-in to receive Automated Safety Alerts, we collect your email or phone number. If you purchase an “Upsell Item” (e.g., Late Checkout, Tour) via a Guide, we collect your name and email address to issue a receipt and notify the Host.

  • For Advertisers & Partners: We collect your business name, contact details, and promotional material.

  • Payment Information: We do not directly collect or store payment card details; this is handled securely by our payment processor, Stripe.

  • When you contact us: We will store your email address and the contents of any communication you send to us.

2. Information we collect automatically

  • For all Users: When you use our website or a Digital Guest Guide, we collect standard server logs and analytics data, such as your IP address, device type, browser information, and how you interact with our service.

  • AI Interactions: When a Guest interacts with “Ask Pio” or “Koru Compass”, we temporarily log the text of the query to generate a relevant response and improve system accuracy.

How We Use Your Information

KoruStay may use the information collected from you for the following purposes:

  • To provide, maintain, and improve our core service, including hosting your Digital Guest Guide.

  • To process subscription payments and Guest Upsell transactions.

  • To power our AI Assistant tools (generating itineraries and answering guest questions).

  • To dispatch Automated Safety Alerts based on geospatial hazards.

  • To facilitate Partner Integrations and B2B discounts.

  • To connect Hosts with Service Providers via the KoruWorks platform.

  • To respond to your enquiries and provide customer support.

  • To inform Hosts of new features, services, and offers from KoruStay (you may opt-out of these communications at any time).

Data Retention & Purpose Limitation (Guest Data)

KoruStay strictly adheres to data minimization principles regarding Guest information:

  • Automated Safety Alerts (Auto-Deletion): When a Guest provides contact information (e.g., email address or phone number) specifically to receive automated safety alerts or guide notifications during their stay, this data is held only temporarily. To protect Guest privacy, KoruStay’s system automatically deletes this specific notification contact data from our active database immediately following the departure date set by the Guest.

  • Commerce Engine (Upsells): Because KoruStay acts as the Merchant of Record for these transactions, if a Guest provides information to purchase an Upsell Item, this transactional record must be retained to comply with financial, accounting, and dispute resolution management requirements (e.g., chargebacks). However, this data is strictly limited in purpose: KoruStay does not use Guest Upsell data for marketing, promotional campaigns, or general contact outside of fulfilling that specific transaction.

Who We Share Your Information With

We do not sell, trade, or rent your personal information to others. However, we share your information with trusted third parties who assist us in operating our business:

  • Stripe: Our payment gateway, which securely processes all Host subscription payments and Guest Upsell transactions.

  • Our Web Hosting Provider: Who stores our website data on secure servers.

  • AI Infrastructure Providers: We utilize third-party Large Language Models (e.g., Google Cloud, OpenAI) to power “Ask Pio.” We send the text of Guest queries to these models to generate answers; however, we do not transmit Guest Personally Identifiable Information (PII) such as names, emails, or phone numbers to these third-party AI processors.

  • Service Providers (KoruWorks): If a Host utilizes the KoruWorks marketplace to book a service, the Host explicitly authorizes KoruStay to share necessary operational data (e.g., Property location, Guest check-out time, access codes) with the selected Service Provider to fulfill the job.

  • Strategic B2B Partners (The Partners & Deals Engine): To provide Hosts with exclusive wholesale discounts and integrations, we partner with enterprise providers.

    • Verification of Eligibility: If a Host actively chooses to redeem a specific Partner offer, KoruStay may share or verify identifying information (strictly limited to Username and Email Address) and the current KoruStay Subscription Tier with that specific Partner.

    • Purpose of Sharing: This data sharing is solely to verify eligibility for the Partner’s exclusive discount. We do not share Host Content, Guest data, or financial information with B2B Partners.

  • Travelpayouts: To manage commissions on bookings made through general affiliate links.

We will only share information to the extent necessary to provide our service.

Security

As required by the Privacy Act 2020, we follow strict security procedures when storing and using the information you have provided. All data is stored behind our web host’s firewalls. Access to your personal data is limited to authorised personnel of KoruStay who need it to perform their duties.

Cookies and Tracking Technologies

Our site uses cookies and similar tracking technologies to enhance user experience and analyze website traffic. These are limited to our site only and are not used to track you across other websites. You can manage your cookie preferences through your browser settings.

Your Rights (Access, Correction, and Opt-Out)

You have the right to ask for a copy of any personal information we hold about you and to ask for it to be corrected if you think it is wrong.

If you would like to ask for a copy of your information, request a correction, or opt-out of marketing communications, please contact our Privacy Officer at: info@korustay.co.nz.

At your request, we will remove your personal information from our active database.

Third-Party Links

This privacy policy applies solely to information collected by KoruStay. We are not responsible for the privacy practices of third-party websites that may be linked to from our site, from within a Digital Guest Guide, or from Partner offers.