Privacy Policy

1. Who we are

Stay in SMA is a rental listing platform operated by Spika, based in San Miguel de Allende, Guanajuato, México. We are responsible for the collection and use of your personal data as described in this policy.

This notice is issued in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and its regulations.

2. Data we collect

When you use Stay in SMA, we may collect the following personal data:

• Name and contact details (email address, phone number)
• Enquiry and message content submitted through contact forms
• Property preferences and search activity
• Technical data: IP address, browser type, device type, pages visited
• Cookie data (see Section 7)

We do not collect sensitive personal data (datos personales sensibles) as defined by the LFPDPPP.

3. How we use your data

We use your personal data for the following primary purposes:

• To respond to enquiries about listed properties
• To connect you with property managers or owners
• To improve the platform and user experience
• To send service-related communications relevant to your enquiry

We do not use your data for automated decision-making or profiling that produces legal effects concerning you.

4. Data sharing

We share your data only where necessary. When you submit an enquiry about a property, your contact details and message will be shared with the relevant property manager or owner so they can respond to you.

We use the following third-party services which may process your data:

• Supabase — database and authentication infrastructure
• Resend — transactional email delivery
• Vercel — website hosting and performance
• Google Maps — property location display

We do not sell your personal data to third parties.

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Enquiry data is typically retained for up to 24 months. You may request deletion at any time (see Section 6).

6. Your rights (ARCO)

Under the LFPDPPP, you have the right to Access, Rectify, Cancel, and Object to the processing of your personal data (derechos ARCO). You also have the right to revoke your consent where processing is based on consent.

To exercise any of these rights, contact us at:

contact@stayinsma.com

We will respond to verified requests within 20 business days as required by law.

7. Cookies

Stay in SMA uses cookies and similar technologies to operate the platform and understand how it is used. These include:

• Essential cookies — required for the site to function (session management, security)
• Analytics cookies — help us understand usage patterns so we can improve the platform

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Data is stored on encrypted, access-controlled infrastructure.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any questions about this privacy policy or your personal data: