Privacy policy
Last updated 30 August 2026 · OPUS Technology, Abuja, Nigeria
Who this covers
Smart Stay is operated by OPUS Technology, Abuja, Nigeria. This policy covers smartstaybyopus.com, every hotel's booking page on a smartstaybyopus.com address, the guest check-in page, the front desk and the owner overview.
Two different people are described below. A hotel is our customer. A guest is someone booking a room at that hotel. For a guest's information the hotel is the data controller and OPUS is a data processor acting on the hotel's instructions.
What we collect from a guest
- Name, email address and phone number, so the hotel can confirm the booking and reach them.
- Arrival and departure dates, the rooms chosen and the number of guests.
- Anything typed into a special-requests or notes field.
- What was paid, when, and the payment reference. Never the card number.
- At check-in, whatever additional details that hotel asks for — which may include nationality and an identification document, at the hotel's discretion.
What we collect from a hotel
- The contact name, email address and phone number given at signup.
- The hotel's name, address and bank account details, used to create the Paystack subaccount that your money settles into.
- Rooms, rates, photographs and any other content you add.
- A password, stored only as a salted hash. We cannot read it.
Payments
All card payments are handled by Paystack. Card numbers, expiry dates and security codes are entered on Paystack's systems and never pass through ours. We receive confirmation that a payment succeeded, the amount, and a reference. Paystack's own privacy policy governs what they hold.
Money from a guest settles into the hotel's own Paystack subaccount and therefore the hotel's own bank account. OPUS does not hold your takings at any point.
Where the data is kept
Booking and guest data is stored in Google Workspace infrastructure, in a separate file belonging to each hotel. One hotel's guests are never stored alongside another's. Static pages are served by Netlify. Both providers operate data centres outside Nigeria, so information is transferred and stored internationally; both are bound by their own data-protection commitments.
How long we keep it
Booking records are retained for as long as the hotel's account is open, because a hotel needs its own history. If a hotel closes its account, its data is deleted on request. A guest who wants their own record removed should ask the hotel, which can delete it directly or ask us to.
Who we share it with
Nobody, other than the service providers that make the product work: Paystack for payments, Google for storage, Netlify for hosting. We do not sell personal data, we do not share it for advertising, and we do not use guest data to market anything.
Your rights under the NDPA 2023
The Nigeria Data Protection Act 2023 gives you the right to ask what we hold about you, to have it corrected, to have it deleted, to object to how it is used, and to receive a copy. Write to OPUS Technology using the contact below and we will answer.
If you are a guest, the fastest route is usually the hotel you booked with, since the record is theirs. We will help them respond.
Cookies
Smart Stay does not use advertising or tracking cookies. The product stores a small amount of information in your browser to keep you signed in and to remember whether you have chosen the Daylight or Night shift appearance. Nothing in it identifies you to anyone else.
Changes
If this policy changes materially we will update the date at the top and, for hotels, say so by email.
Contact
OPUS Technology, Abuja, Nigeria. Support is available 24/7 — message us on WhatsApp.