The one-line version: We never see your card number or your logins to other sites. We make money only when you click through to a booking platform and book there — never from you. We don't process any payments ourselves.
What we collect
If you create an account, we store the information you choose to give us so we can personalize your price comparisons:
- Your name and email address
- The cards in your wallet — by bank and tier only (for example "HSBC Premier"). We use this to match you to card promotions.
- Your self-declared membership tiers on Traveloka, Trip.com, Agoda, and direct loyalty programs
What we store vs. what we never touch
✓ We store
- Name & email
- Card issuer + tier (e.g. "KBank Wisdom")
- Self-declared membership levels
✗ We never ask for or store
- Card numbers, expiry dates, or CVV
- Your passwords for Traveloka, Trip.com, Agoda, or any bank
- Any payment details — we don't process payments at all
How we make money
Stayside is a comparison and referral service. When you click a "Book" button, you go to the booking platform's own website and complete your booking there. If you book, that platform may pay us a referral commission — paid by them, not added to your price. Your price is the same whether you click through us or go directly.
In the future we may also show advertising. We will never let advertisers change which deal we show as cheapest — our rankings are based only on price.
We don't verify your inputs — and that's on purpose
You tell us your card tiers and memberships yourself. We don't ask for proof and we don't check with the banks or platforms. This keeps things simple and private. The trade-off: the prices we show are estimates based on what you told us. The final price is always confirmed at checkout on the provider's own site. If a discount you expected doesn't apply there, update your profile and re-check.
How your data is stored
In the current version, your profile is saved only in your own browser — it does not leave your device and is not sent to our servers. Clearing your browser data removes it. When we introduce server-based accounts, we will update this policy and ask for your consent first, and we will protect stored data with appropriate security measures.
Your rights
Under Thailand's Personal Data Protection Act (PDPA) and similar laws, you can ask us to show, correct, or delete the personal data we hold about you, and you can withdraw consent at any time. To make a request, contact us at the address below. Because data is currently stored only in your browser, you can also delete everything yourself by signing out and clearing your browser data.
Cookies & analytics
We may use basic analytics to understand which pages are popular so we can improve the site. We'll show a cookie notice and ask consent where required before setting any non-essential cookies.
Third-party sites
When you click through to Traveloka, Trip.com, Agoda, an airline, or a hotel, you're on their site under their privacy policy and terms — not ours. We're not responsible for how they handle your data or your booking. Brand names are used only to identify and compare these services; Stayside is independent and not endorsed by or affiliated with them.
Contact
Questions or data requests: privacy@staysidehq.com.
Note for launch: This is a clear, honest starting template — not a substitute for legal advice. Before you go live and especially before adding server-based accounts, have a Thai lawyer or a PDPA-compliance service review it and add your registered business details.