feedstays
Sign in

Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains what information FeedStays (operated by Nex Local Services Inc, "FeedStays," "we," "us") collects when you use feedstays.com, creator store pages, creator clubs, embedded widgets, hotel pages, the AI chat assistant ("the Desk"), and the Instagram assistant that creators can connect to their accounts, and how we use it. Support: support@feedstays.com.

1. Information we collect

Booking information: your name, email, phone number, the names of any additional guests, the hotel booked, stay dates, and price.

Attribution information: which creator store or widget you came from, and (if you arrived via a TikTok ad) TikTok's click identifier (ttclid).

Hashed contact information: we store a hashed (irreversible) version of your email and/or phone number to enforce referral-credit limits and to detect fraud.

Sign-in information: if you sign in (to spend referral credit, or as a creator), we use Firebase Authentication, which may involve Google sign-in or an emailed sign-in link.

Desk conversations: if you chat with the Desk, we retain the conversation transcript for 90 days. You can request deletion at any time — see Section 7.

Club membership: if you join a creator's club, we record which club you joined and how you signed in. Signing in with WhatsApp means sending us a one-time code from your WhatsApp number, so we receive and store that phone number. Signing in with email means we send a 6-digit code to your email address and store that address to sign you in and, if you ask, to send you a creator's members' letter. Signing in through an Instagram link stores a hashed version of your Instagram user ID, not your phone number or email. If you tick the box when you sign in with email, we send you that creator's weekly members' letter to that address; every letter has an unsubscribe link.

Instagram messages and comments: if you comment on, or send a direct message to, the Instagram account of a creator who has connected FeedStays, we receive the comment or message, your Instagram-scoped user ID and username, and the post it relates to, through Instagram's official API. See Section 5.

Creator payout and tax information (creators only): PayPal email or Wise account details, and a completed W-9 (US persons) or W-8BEN (non-US persons) tax form, stored in a private, access-restricted store. We retain tax records for at least 4 years as required by IRS recordkeeping rules.

Browser storage: we use small pieces of browser storage for functional purposes: which creator's store referred you (fs_via, session storage), whether you're a returning guest (fs_guest, local storage), your current Desk conversation ID (session storage), and a studio invite code if you were invited to create a store (local storage). We also use TikTok pixel cookies (see Section 3).

2. How we use this information

We use the information above to: process and confirm your booking, send booking and referral-related emails, attribute your booking to the correct creator for commission purposes, enforce referral-credit limits and detect abuse, operate the Desk, pay creators and prepare required tax filings, and measure and improve our advertising.

3. Who we share information with

We do not sell your personal information. TikTok pixel-based advertising may be considered a "sharing" of personal information for cross-context behavioral advertising under some state laws (see Section 8).

4. Creator community opt-in

At checkout on a creator's store, you may tick a box to join that creator's community. If you tick it, we share your first name, last name, and email with that creator, who may then contact you directly (for example, via email, or one of the community channels they list — TikTok, Instagram, WhatsApp, Telegram, Discord, or a newsletter). This sharing only happens if you actively opt in; leaving the box unticked means we do not share your contact information with the creator. Creators who receive this information must use it only to contact you about travel-related content, honor your unsubscribe requests, and may not resell it (see the Creator Program Agreement). If a creator's club uses Discord, you can join with your Discord account. We then store your Discord user ID so we can add you to the creator's FeedStays-run Discord server and give you a role there (and a "Guest" role after you book). We never read your Discord messages or see your other servers.

5. The social assistants

A creator can connect their own social accounts to FeedStays: an Instagram Business or Creator account, a Facebook Page, a Threads account, a TikTok account (personal or business), or a YouTube channel. When they do, we store the access tokens that the platform issues for that account (for TikTok, also the token the platform provides to renew access). These tokens let us read the comments, and where the platform allows it the messages, sent to that account, and post replies from it. The creator can disconnect any account at any time in their studio settings; disconnecting stops the assistant on that account and deletes its tokens straight away.

While an account is connected, an AI assistant working for the creator reads the comments on the creator's own posts and videos, and on Instagram and Facebook also the direct messages sent to the account, and drafts or sends replies. Depending on the creator's settings, the creator approves replies before they are sent, or routine replies are sent automatically; for at least the first 14 days after an account is connected, every reply waits for the creator's approval. To decide whether and how to reply, the assistant uses the comment or message text, the commenter's username and display name, and the identifier the platform gives the commenter.

Instagram and Facebook. The assistant uses a name the creator chooses, and its first message to each person says that it is a virtual assistant. When a comment asks about prices, dates or availability, the assistant may send the commenter one private message (on Facebook, through Messenger) with a link to the creator's club. Opening that link signs you in to the club with your Instagram or Facebook identity. The assistant never messages people who have not commented on or messaged the account first, sends at most one unprompted message per person per post, and only replies to direct messages within 24 hours of your last message. Send STOP (or BERHENTI) in a direct message to stop all messages from the assistant to you.

Threads, TikTok and YouTube. The assistant only posts public replies; it does not send direct messages on these platforms. It replies at most once to each person per post or video. On Threads, a reply may carry a link to the creator's club; on TikTok, replies point to the link in the creator's profile, and on YouTube to the video's description or pinned comment, instead. On Threads, the creator may also reply to recent public posts that ask for hotel recommendations in cities the creator covers; each of those replies is approved by the creator before it is posted, and the same person is not replied to again for 30 days. Reply STOP (or BERHENTI) to the creator's post or reply and the assistant will not reply to you again.

Discord. In a creator's Discord server, you can ask the creator's AI assistant a question with the /ask command. The assistant answers you by direct message, only after you use /ask, and its first message says it is a virtual assistant. Type /ask stop to stop all messages from the assistant.

We use this information only to answer you on the creator's behalf, to help you book, and to keep the assistant within each platform's limits. Comment and message text may be processed by our AI provider to classify the request and draft a reply; it is not used for advertising, and we do not sell it.

YouTube. When a creator connects a YouTube channel, FeedStays uses YouTube API Services. By using this feature you also agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. FeedStays' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. A creator can revoke FeedStays' access at any time in their studio settings or at myaccount.google.com/permissions.

How we prioritise follow-ups. To help a creator follow up with the people most likely to book, we combine your interactions with that creator — questions you asked (price, dates, location), dates and hotels you mentioned to the assistant, signing in to their club, opening a checkout and booking — into a lead score that only that creator and the FeedStays team can see. The score never sends you messages on its own; the assistant still only replies where you contacted the creator. We keep these structured details (not your messages) for 90 days and the score for up to 180 days after your last interaction. We also keep anonymous statistics of which replies led to a reply, sign-in or booking; they are unlinked from you after 14 days and the reply text is deleted after 90 days. Sending STOP (or BERHENTI) to the creator on Instagram, Facebook, Threads, TikTok, YouTube or Discord, or asking the assistant to delete your data, removes you from it.

6. Data retention

We keep booking records for as long as needed for accounting, tax, and dispute-resolution purposes. Desk conversations, including Instagram, Facebook and Discord direct-message conversations handled by the assistant, are kept for 90 days. Comments and messages waiting to be processed are kept for up to 7 days, reply drafts for up to 37 days, YouTube comment data (including drafts) is deleted or refreshed within 30 days, questions sent with /ask on Discord are removed from the processing queue right after they are handled, while the assistant conversation they belong to is kept for 90 days and unsent reply drafts for up to 30 days; the record of which creator you last asked is kept for 180 days, and your Discord user ID stays on your member account until you ask us to delete it, and Instagram and Facebook sign-in links expire after 7 days. A record that the assistant has already replied to you on a post or video is kept for up to 365 days, so that it never replies twice. Two records are kept until you ask us to delete them: a STOP request, so that we keep honouring it, and a note that the assistant has already introduced itself to you. These records are stored against a hashed version of your platform identifier or username, not the identifier itself. A connected account's tokens are kept until the creator disconnects or the tokens expire. Creator tax forms are kept for at least 4 years. Hashed email/phone used for fraud checks is kept for as long as needed to enforce referral limits.

7. Your choices and rights

You can request a copy of, correction to, or deletion of your personal information, including Desk conversation history, Instagram conversations with the assistant, and club membership, by emailing support@feedstays.com. We will respond within a reasonable time.

8. California residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect, use, and share; request deletion of your personal information; correct inaccurate personal information; and opt out of the "sale" or "sharing" of your personal information (including cross-context behavioral advertising, such as certain TikTok pixel-based advertising — see Section 3). We do not sell personal information for money. To exercise these rights, email support@feedstays.com.

9. Indonesian users (UU PDP)

If you are located in Indonesia, Indonesia's Personal Data Protection Law (UU PDP) may apply to our processing of your personal data.

10. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

12. Contact

Questions about this Privacy Policy: support@feedstays.com.