770 Stays — Terms of Service
Effective date: July 14, 2026 Provider: Yosef Yarhi dba 770 Stays ("770 Stays," "we," "us," or "our")
Note on this document. These Terms are a template prepared for 770 Stays and contain placeholders (shown in brackets). They must be reviewed and finalized by qualified legal counsel — together with the 770 Stays Privacy Policy — before publication. The Privacy Policy governs how personal data is collected, used, and shared; these Terms govern your contractual use of the Service.
1. Acceptance of these Terms
These Terms of Service ("Terms") form a binding agreement between you and Yosef Yarhi dba 770 Stays governing your access to and use of the 770 Stays mobile application and related services (collectively, the "Service").
By creating an account, signing in (including via Sign in with Apple or Google), or otherwise accessing or using the Service, you confirm that you have read, understood, and agree to be bound by these Terms and by the 770 Stays Privacy Policy, which is incorporated by reference. If you do not agree, do not use the Service.
If you use the Service on behalf of a business or other legal entity, you represent that you are authorized to bind that entity, and "you" refers to both you and that entity.
2. Description of the Service
770 Stays is a property-management system ("PMS") built for apartment owners, initially serving the Crown Heights (Brooklyn, New York) community. The Service lets an owner ("Owner," "you") manage their own short-term-rental units, including:
- creating and organizing property listings (name, address, description, amenities, room and bed layout) and listing photos;
- tracking availability, reservations, and the booking lifecycle;
- maintaining a private guest directory (CRM), notes, and owner-private guest reputation reviews;
- recording payment and deposit amounts and statuses for their own records (see Section 8);
- issuing receipts using billing details the Owner enters;
- inviting a small team and controlling that team's access to the Owner's account; and
- (where enabled) receiving reminder notifications and syncing external calendars.
The Broker layer
The Service also offers an optional broker ("מתווך") capability that lets an Owner grant a separate, vetted broker limited, consent-based access to specific units in the Owner's account, so the broker can bring bookings that land in the Owner's account with a commission tag. The broker model is described in Section 5.
The Service is provided as software only. 770 Stays is not a party to any rental, reservation, or commission arrangement between an Owner and a guest, a broker, or any third party, and does not act as a broker, agent, escrow, landlord, or property manager. Owners are solely responsible for their listings, bookings, pricing, guest relationships, tax obligations, and legal compliance.
Features described as planned, future, or "not yet shipped" (for example, external calendar sync, outbound messaging/email, and AI-assisted features) may change or may never be released, and are not part of the Service until announced as available.
3. Eligibility and Accounts
3.1 Eligibility
The Service is intended for apartment owners and their authorized team members, all of whom must be adults (at least 18 years old, or the age of majority in their jurisdiction if higher) and able to form a binding contract. The Service is not directed to children and is not intended for anyone under 18 to register or use. Data an Owner records about guests — including the count and ages of minors in a booking party — is booking-management data entered by the Owner about their own guests, not the personal data of a child user of the Service (see Section 4.4).
3.2 Account registration and accuracy
You must provide accurate, current, and complete information when creating your account and keep it up to date. You may register with an email and password, or through Sign in with Apple or Google, in which case certain profile details (such as name and email) may be shared with us by that provider to create your account.
3.3 One person, one own account
An account is personal to the individual (or the entity's authorized representative) who created it. You may not create an account for, or in the name of, anyone else without authorization, impersonate any person or entity, or share your credentials so that another person operates as you. Team access to an Owner's account must be granted through the Service's built-in team-invitation and permissions features — not by sharing login credentials.
3.4 Account security
You are responsible for safeguarding your login credentials and for all activity that occurs under your account. Passwords for email/password accounts are stored only as salted hashes by our authentication provider and are never accessible to us in plaintext. You must notify us promptly at contact@770stays.com if you suspect any unauthorized access to or use of your account.
3.5 Team members
An Owner who invites team members is responsible for the team members they add, for the scope and permissions they grant, and for promptly removing access when it is no longer appropriate. Team members must use the Service only within the scope the Owner assigns and in accordance with these Terms.
4. Owner Responsibilities — You Are the Controller of Your Guests' Data
A defining feature of the Service is that you, the Owner, decide what guest and business information to store and how to use it. With respect to the personal data you enter about your guests, you are the data controller and 770 Stays acts as your processor/platform, handling that data on your instructions to provide the Service. Accordingly, you agree that:
4.1 Lawful basis and authority
You will only collect and enter guest and third-party personal data (such as guest name, phone, email, notes, party composition including children's ages, and billing identity) where you have a lawful basis and the authority to do so under all laws that apply to you, including applicable U.S. federal and state privacy, consumer-protection, and anti-discrimination laws.
4.2 Notice to your guests
You are responsible for providing your guests with any privacy notices and for obtaining any consents that the law requires for your collection and use of their information through the Service. You will not use the Service to process personal data in a way your guests would not reasonably expect.
4.3 Accuracy, minimization, and appropriate use
You are responsible for the accuracy of the information you enter, for keeping it up to date, for entering only information you actually need for your booking and CRM purposes, and for honoring guest requests you are legally required to honor (such as correction or deletion). You will not enter special-category, unlawful, defamatory, or discriminatory content about a guest, and you will keep private notes and guest-reputation reviews professional, factual, and lawful.
4.4 Data about minors
The Service allows you to record the number and ages (integers only, without names) of minors in a booking party for occupancy and capacity purposes. You are responsible for handling any such information lawfully. The Service is not directed to children, does not knowingly create accounts for anyone under 18, and does not solicit personal data directly from children.
4.5 Your legal compliance
You are solely responsible for your own compliance with tax, licensing, zoning, landlord–tenant, short-term-rental, and other laws applicable to your rental activity. 770 Stays provides tools, not legal, tax, or accounting advice.
5. Broker / Consent-Grant Model
The Service lets an Owner grant a broker limited cross-account access to specified units. This access is governed by the following rules, which both Owners and brokers must follow.
5.1 Per-unit, explicit consent
A broker receives access only to the specific unit(s) an Owner explicitly grants, at the permission level the Owner selects, recorded with a consent version and timestamp. There is no account-wide broker access — consent is unit-by-unit.
5.2 What a broker may see — occupancy vs. guest contact
Under a standard per-unit grant, a broker may see only that unit's occupancy: reservation dates, booking status, and the guest's first name. A broker may see a guest's full name and phone number only (a) for stays the broker itself brokered, or (b) where the Owner additionally grants the separate "view guest contact" permission for that unit. A broker does not receive an Owner's broader CRM, private notes, guest-reputation reviews, financial totals, or other units the Owner has not shared.
5.3 Revocability
An Owner may revoke a broker's grant to any unit at any time. Revocation takes effect on a going-forward basis and does not, by itself, alter records of bookings the broker already brokered or audit records already written.
5.4 Audit of PII access
Every time a broker accesses guest personal data through the Service, that access is recorded in an append-only audit log (which guest data, when, and how). This log exists to protect Owners and their guests. As described in Section 11, these audit records are retained even after a broker deletes their own account, so that an Owner's record of who accessed their guests' data is preserved.
5.5 Commission
An Owner and a broker may associate a commission percentage with brokered bookings as a record-keeping tag within the Service. 770 Stays does not calculate, collect, hold, disburse, or guarantee any commission or other payment, and is not responsible for any commercial dispute between an Owner and a broker. Any commission arrangement is solely between the Owner and the broker.
5.6 Broker obligations and restrictions
A broker must:
- use guest personal data only to broker and service bookings for the units the Owner has shared, on the Owner's behalf and instructions;
- not copy, export, scrape, aggregate, sell, or re-share guest data, or use it to build an independent database or for any purpose beyond the specific brokering relationship;
- not attempt to access units, guests, accounts, or data outside the scope the Owner granted, or circumvent the occupancy-only limits or the audit logging; and
- comply with all applicable privacy and other laws in handling any guest data it accesses.
5.7 Broker as a separate legal entity; data-processing agreement
A broker is a separate legal entity and an independent controller/processor of the data it lawfully accesses through its own relationship with Owners and guests. Broker access is conditioned on the broker entering a written data-processing agreement with 770 Stays (identifying the broker's legal entity and tax identifier). Until that agreement is in place, broker sharing may be limited or unavailable.
5.8 AI-assisted broker features
Any future AI-assisted broker feature (for example, processing inquiry text) will require a separate, explicit AI-processing consent distinct from the broker grant, and will be disclosed before it is offered. No such feature is active today.
6. Acceptable Use
You agree not to, and not to permit anyone acting through your account (including team members and brokers) to:
- upload, enter, or process any data — including another person's personal data — that you do not have the lawful right and authority to provide;
- use the Service for any unlawful, fraudulent, deceptive, harassing, discriminatory, or infringing purpose;
- scrape, crawl, harvest, bulk-export, or systematically extract data or content from the Service, or use bots or automated means except through interfaces we expressly provide;
- reverse engineer, decompile, or attempt to derive source code, or probe, scan, or test the vulnerability of the Service or bypass its security, authentication, permission scoping, access controls, or audit logging;
- interfere with, overload, or disrupt the Service or its infrastructure, or attempt to gain unauthorized access to any account, data, or system;
- resell, sublicense, or provide the Service to third parties except as expressly permitted (for example, through the team and broker features);
- misrepresent your identity or affiliation, or infringe any intellectual-property, privacy, publicity, or other right; or
- use the Service to send unlawful, unsolicited, or abusive communications.
We may investigate and take appropriate action, including suspending or terminating accounts, for any violation.
7. User Content and the Public Property-Photos Bucket
7.1 Your content
"User Content" means the listings, photos, guest and CRM records, notes, reviews, receipts, and other information you and your team submit to the Service. As between you and us, you retain all rights in your User Content. You are solely responsible for your User Content and represent that you have all necessary rights and consents to submit it and to grant the license below.
7.2 License to operate the Service
You grant Yosef Yarhi dba 770 Stays a worldwide, non-exclusive, royalty-free license to host, store, reproduce, process, transmit, display, and adapt your User Content solely to operate, provide, secure, and improve the Service for you (including generating shareable listing cards and links you choose to create) and as otherwise described in the Privacy Policy. This license ends when the content is deleted, except for content retained as described in Section 11 and for standard backups.
7.3 Public property photos — important
Photos you upload to a listing are stored in a publicly readable storage bucket and are served at public URLs that require no authentication or login to view. This design supports features such as shareable branded listing cards and link previews (for example, in messaging apps). Anyone who has, discovers, or is given a photo's URL can view that photo, and it may be indexed or cached by third parties.
Because of this, you should:
- upload only images you have the right to publish and are comfortable making publicly accessible; and
- avoid including guests, guests' faces or belongings, sensitive interior details, documents, or anything you would not want to be public in listing photos.
Do not treat the property-photos bucket as private storage.
7.4 Deletion limitation for team uploads
When an account is deleted, the Service makes a best-effort purge of photos stored under that user's own storage prefix. Photos uploaded by a team member are stored under that team member's prefix and are not automatically removed when the Owner deletes the Owner's account. This is a known limitation; contact us at contact@770stays.com if you need assistance removing specific objects.
7.5 Our intellectual property
The Service itself — including its software, design, branding, and "770 Stays" name and marks — is owned by Yosef Yarhi dba 770 Stays and its licensors and is protected by intellectual-property laws. Except for the rights expressly granted to you here, no rights are transferred to you.
7.6 Feedback
If you send us suggestions or feedback, you grant us the right to use them without restriction or obligation to you.
8. Payments — Tracking Only, Not a Payment Processor
770 Stays does not process payments and does not store any payment-card or bank-account data. The Service provides record-keeping tools only:
- You manually enter amounts (such as final price, currency, deposit amount, and down-payment amount) and select a status from a fixed set (for example, no payment / down payment / fully paid; deposit none / received / returned). These are numbers and labels you type for your own tracking, not instructions to move money.
- Receipts capture an optional U.S. billing identity you enter (such as bill-to name, company, street, city, state, ZIP, and tax ID/EIN). No card number, CVV, expiry, or bank-account fields exist anywhere in the Service.
- There is no integration with Stripe, PayPal, or any payment processor, and no funds ever flow through the Service.
Any actual payment, deposit, refund, or commission between you and a guest, broker, or other party happens outside the Service and is solely your responsibility. 770 Stays is not responsible for the accuracy of amounts you enter, for the collection or handling of any funds, or for the tax or accounting treatment of your records.
9. Third-Party Services
The Service relies on third-party providers to operate. Their handling of data is described in the Privacy Policy; key providers include:
- Supabase — our core infrastructure provider, which hosts and processes the data in the Service (database, authentication, file storage, and server functions) on our behalf as a sub-processor.
- Sentry — crash- and error-diagnostics, used only on production builds when enabled. Diagnostic events are configured to scrub personal data (for example, redacting query strings and omitting request headers and bodies). You should nevertheless avoid placing guest data into free-text that could surface in an error.
- Apple and Google — identity providers for Sign in with Apple and Google OAuth, used when you choose them to authenticate. Apple also distributes the app via the App Store.
- Expo push-notification service — where reminder notifications are enabled, used to deliver notifications to your device; reminder text may include a guest's name. (Notification delivery may not be available in all versions.)
Your use of any third-party service, sign-in provider, or platform is also subject to that party's own terms and policies. We are not responsible for third-party services, and their availability may change.
10. Disclaimers, Limitation of Liability, and Indemnity
10.1 "As is" disclaimer
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, title, accuracy, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, secure, or free of data loss, or that it will meet your requirements. You are responsible for maintaining your own copies of data that is important to you.
10.2 No professional advice
The Service does not provide legal, tax, accounting, or professional advice, and nothing in the Service should be relied on as such.
10.3 Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, Yosef Yarhi dba 770 Stays AND ITS OFFICERS, EMPLOYEES, AND SUPPLIERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS, ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (US$100).
Some jurisdictions do not allow certain exclusions or limitations, so some of the above may not apply to you; in that case, our liability is limited to the maximum extent permitted by law.
10.4 Indemnification
You will defend, indemnify, and hold harmless Yosef Yarhi dba 770 Stays and its officers, employees, and suppliers from and against any claims, damages, liabilities, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your User Content or your use of the Service; (b) your collection, entry, use, sharing, or handling of guest or other third-party personal data (including your role as data controller under Section 4); (c) your rental, booking, broker, or commission arrangements; (d) your violation of these Terms or of any law or third-party right; or (e) any grant of access you make to a team member or broker.
11. Termination and Account Deletion
11.1 Termination by you; in-app deletion
You may stop using the Service at any time. The Service provides in-app account deletion. Deleting your account is immediate, permanent, and irreversible. It performs a hard delete of your account and cascades to remove your associated data — including your profile, properties and rooms, reservations and services, customers/CRM, team records, push tokens, notification logs, receipts, guest reviews, and calendar-sync settings — and makes a best-effort purge of the photos stored under your own storage prefix. Deletion is scoped to your own account only: you cannot delete another user's account, and the operation does not fail or roll back if a storage cleanup step is incomplete.
11.2 Retained records after deletion
For legitimate record-keeping and accountability, certain records are retained by design even after deletion:
- Broker access audit logs survive the deletion of a broker's account (with the broker's identity de-linked where appropriate), so that an Owner's record of who accessed the Owner's guests' data is preserved; and
- reservations that a broker brokered may survive in the Owner's account with the broker reference removed.
In addition, as noted in Section 7.4, photos uploaded by a team member under a different prefix may not be automatically purged, and standard backups may persist for a limited period before expiring.
11.3 Retention generally
We retain data for as long as your account is active or as needed to provide the Service, and thereafter as described here and in the Privacy Policy, or as required by law. Except for the deliberate carve-outs above, data persists until you delete the relevant record or your account. Retention periods are stated in the Privacy Policy (§8): data is kept while your account is active, and the deliberately-retained broker access log and notification log are kept for up to 24 months. (Category-level periods should be confirmed with counsel before launch.)
11.4 Termination or suspension by us
We may suspend or terminate your access, with or without notice, if you violate these Terms, create risk or legal exposure for us or others, or if we discontinue the Service. On termination, the license in Section 7.2 ends and, except for retained records described above, we will delete or de-identify your data in the ordinary course. Sections that by their nature should survive termination (including Sections 4, 7.5, 8, 10, 11.2, 12, and 13) will survive.
12. Governing Law and Dispute Resolution
Placeholder — confirm with counsel. The governing-law, venue, arbitration, and class-action provisions below are drafted for a U.S. / New York default and must be reviewed and finalized by qualified legal counsel for enforceability in your jurisdiction and for App Store compliance before publication.
These Terms are governed by the laws of the State of New York (default: New York) and applicable U.S. federal law, without regard to conflict-of-laws rules. Subject to any binding arbitration or informal-resolution provisions counsel elects to include, you and Yosef Yarhi dba 770 Stays agree that the state and federal courts located in New York (default: Brooklyn / Kings County, New York) will have exclusive jurisdiction and venue over any dispute arising out of or relating to these Terms or the Service, and you consent to their personal jurisdiction.
Before filing any claim, you agree to first contact us at contact@770stays.com and attempt in good faith to resolve the dispute informally. [Optional — insert arbitration and class-action-waiver clauses per counsel.]
13. Changes to the Service or these Terms
We may modify the Service or these Terms from time to time. If we make material changes to these Terms, we will update the "Effective date" above and provide notice by reasonable means (for example, in the app or by email). Changes take effect when posted unless otherwise stated, and your continued use of the Service after they take effect constitutes acceptance. If you do not agree to the updated Terms, you must stop using the Service and may delete your account. We may add, change, or discontinue features at any time.
14. Contact
Questions about these Terms or the Service can be directed to:
Yosef Yarhi dba 770 Stays Email: contact@770stays.com
15. General
These Terms and the Privacy Policy are the entire agreement between you and Yosef Yarhi dba 770 Stays regarding the Service and supersede any prior agreements on that subject. If any provision is held unenforceable, the remaining provisions remain in effect and the unenforceable provision will be modified to the minimum extent necessary. Our failure to enforce any right is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Nothing in these Terms creates any agency, partnership, employment, or joint-venture relationship between you and us.