Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how NEXPOINT SOLUTIONS FZCO (trading as VertexStay) ("VertexStay", "we", "our", or "us") collects, uses, and shares information about you when you use our property management platform and related services.

1. Information we collect

We collect information you provide directly to us, information collected automatically, and information from third parties.

Information you provide:

Account registration data (name, email address, password)

Property information (hotel name, address, number of rooms)

Billing and payment information (processed securely by Stripe; we do not store full card numbers)

Guest data entered into the VertexStay platform on behalf of your hotel guests

Communications you send us via email, chat, or support tickets

Information collected automatically:

Log data (IP address, browser type, pages visited, timestamps)

Device information (operating system, device identifiers)

Usage data (features accessed, session duration, click patterns)

Cookies and similar tracking technologies (see our Cookie Policy)

Information from third parties:

Calendar and availability data from connected OTA channels

Payment status from payment processor integrations

2. How we use your information

We use the information we collect to:

Provide, maintain, and improve the VertexStay platform

Process transactions and send related information (receipts, alerts)

Send you technical notices, security alerts, and administrative messages

Respond to your comments and questions

Send marketing communications (with your consent, where required)

Monitor and analyze usage and trends to improve VertexStay

Detect and prevent fraud and abuse

Comply with legal obligations

We do not sell your personal data to third parties.

3. Data sharing

We may share your information in the following circumstances:

Service providers: We share data with vendors and service providers who perform services on our behalf (hosting, analytics, email delivery, payment processing). These providers are contractually bound to protect your data.

Business transfers: If VertexStay is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect rights, property, or safety.

With your consent: We may share data for other purposes with your explicit consent.

We do not share your hotel guests' personal data with any third party for advertising or marketing purposes.

4. Data retention

We retain your account and property data for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymize your data within 90 days, unless we are required to retain it by law.

Guest data entered by your property is retained according to your configuration and applicable legal requirements. You can request deletion of guest records at any time through the platform or by contacting us.

Log and usage data is retained for up to 24 months for security and analytics purposes.

5. Security

We implement industry-standard security measures to protect your information:

All data is encrypted in transit using TLS 1.2+

Data at rest is encrypted using AES-256

Access to production systems is limited to authorized personnel

We conduct regular security audits and penetration tests

Our infrastructure is hosted on SOC 2 Type II certified cloud providers

We maintain a vulnerability disclosure program

No security system is impenetrable. If you discover a security issue, please report it to security@vertexstay.com.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you

Correction: Request correction of inaccurate or incomplete data

Deletion: Request deletion of your personal data (subject to legal retention requirements)

Portability: Request your data in a structured, machine-readable format

Objection: Object to certain types of processing (e.g., direct marketing)

Restriction: Request that we restrict processing of your data

To exercise these rights, contact us at privacy@vertexstay.com. We will respond within 30 days. For hotel guests whose data is stored in VertexStay, requests should be directed to the hotel property, which acts as the data controller.

7. Cookies

We use cookies and similar tracking technologies to operate the platform and collect usage analytics. You can control cookie settings in your browser. For detailed information on the cookies we use, see our Cookie Policy.

8. International transfers

VertexStay is headquartered in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. We rely on Standard Contractual Clauses approved by the European Commission for transfers of personal data from the European Economic Area.

9. Children

VertexStay is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, for significant changes, sending you an email notification. Your continued use of VertexStay after the effective date constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

NEXPOINT SOLUTIONS FZCO (trading as VertexStay)

Building A1, Dubai Digital Park

Dubai Silicon Oasis, Dubai, United Arab Emirates

Reg. No. 586648108

privacy@vertexstay.com