Privacy Policy

TribeStay ("TribeStay", "we", "us", or "our") operates a web application that aggregates long-term accommodation listings — currently focused on Bali — sourced from publicly posted Facebook group posts, structures them with AI, and makes them searchable and filterable for digital nomads. This policy is governed by the laws applicable in the jurisdiction where the operator of TribeStay is established. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices you have. If you have any questions, contact us at brentis@promptlydata.com.

When you use TribeStay, we collect:

• Account data. When you sign up via our authentication provider, Clerk, we receive your name, email address, profile image, and — if you sign in with a social account — the identifiers that the social provider shares (such as your Google or Facebook account email).
• Content you create. Wishlists, notes you attach to listings, and wishlist sharing settings (including the people you invite to a shared wishlist).
• Usage data. Pages viewed, searches and filters applied, device and browser information, IP address, and approximate location derived from your IP address.
• Communications. Messages you send us, for example support requests or listing takedown requests.

Our listings are derived from rental posts made publicly in Facebook groups. We collect the text and images of those public posts and use AI to extract structured details such as price, location, bedrooms, and amenities. Because the original posts are public, the name of the person who posted the listing and a link back to the original post may appear on TribeStay so that users can verify the source and contact the landlord directly.

If you posted a listing and would like it removed or corrected, see "Takedown and removal requests" below — we honor these requests.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the service is used. In addition, we use (or will use) the Meta Pixel and related Meta advertising tools to measure the effectiveness of ads we run on Facebook and Instagram. The pixel may collect information such as the pages you visit on TribeStay, your browser information, and identifiers that Meta uses to match activity to your Meta account.

You can opt out of or limit this tracking:

• Block or delete cookies in your browser settings, or use private/incognito browsing.
• Adjust your ad preferences in Meta's settings at facebook.com/adpreferences.
• Use industry opt-out tools such as the Digital Advertising Alliance's opt-out page.

• To provide, maintain, and improve the TribeStay service.
• To authenticate you and keep your account secure.
• To power features such as wishlists, notes, and wishlist sharing.
• To measure and improve the effectiveness of our advertising.
• To communicate with you about the service, including responses to your requests.
• To detect, prevent, and address fraud, abuse, and technical issues.
• To comply with legal obligations.

Where applicable data protection law requires a legal basis, we process your data: to perform our contract with you (providing the service you signed up for); with your consent (for example, advertising cookies where consent is required); for our legitimate interests (operating, securing, and improving the service, and aggregating publicly available listing information); and to comply with legal obligations.

We do not sell your personal data. We share data with service providers who process it on our behalf:

• Clerk — authentication and account management.
• Neon — database hosting (Postgres) for listings, wishlists, and notes.
• Vercel — application hosting and image storage (Vercel Blob).
• Meta Platforms — advertising measurement via the Meta Pixel, as described above.

We may also disclose data if required by law, to protect our rights or the safety of users, or as part of a business transfer (such as a merger or acquisition), in which case this policy will continue to apply to the transferred data.

• Listings. Listings sourced from public posts are automatically removed approximately 60 days after the original post date, so stale options are not shown.
• Account data and your content. Retained for as long as your account exists. When you delete your account, we delete your account data, wishlists, and notes within a reasonable period, except where retention is required by law or for legitimate business records (e.g. fraud prevention).
• Usage and log data. Retained for a limited period for security and analytics, then deleted or aggregated.

Our service providers may store and process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses offered by our providers) for these transfers.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email us at brentis@promptlydata.com. You may also have the right to lodge a complaint with your local data protection authority.

If you are the owner or original poster of a listing that appears on TribeStay and you would like it removed, corrected, or anonymized (for example, removal of your name), email us at brentis@promptlydata.com with a link to the listing or the original Facebook post. We will process legitimate takedown requests promptly.

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No system is completely secure, so we cannot guarantee absolute security.

TribeStay is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. For material changes, we will provide additional notice where appropriate (for example, by email or an in-app notice).

Questions about this policy or our data practices? Email brentis@promptlydata.com.