Privacy Policy

Introduction

STR Squad (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Information We Collect

We collect information in the following categories:

Account Data

When you create an account, we collect your name, email address, and any profile information you provide. Authentication is handled by Clerk — we do not store passwords directly.

Property Data

When you add properties to the Service, we store listing details, calendar availability, pricing rules, guest communication templates, and maintenance records that you submit. This data is used solely to provide the Service to you.

Usage Analytics

We collect anonymized usage data — such as pages visited, features used, and session duration — to understand how the Service is used and to improve it. This data is collected via Vercel Analytics and does not include personally identifiable information.

Payment Information

Payment card details are collected and processed by Stripe. We do not store full card numbers or CVV codes on our servers. We do retain billing history and subscription status for account management purposes.

Technical Data

We may collect your IP address, browser type, device information, and referring URLs as part of standard server and security logging. This data is retained for a limited period and used solely for security and debugging purposes.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Respond to your support requests and communications
• Send transactional emails (receipts, password resets, service notices)
• Analyze usage patterns to improve features and performance
• Detect, investigate, and prevent fraud and security incidents
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use your data for targeted advertising or share it with data brokers.

Data Sharing

We share your information only with the following trusted service providers, and only to the extent necessary to deliver the Service:

Clerk (Authentication)

Clerk handles user authentication, session management, and multi-factor authentication. Your account credentials and session tokens are managed by Clerk under their Privacy Policy.

Vercel (Hosting & Analytics)

Our platform is hosted on Vercel. Vercel processes request logs and serves static assets on our behalf. Vercel Analytics collects anonymized page-view data. See Vercel’s Privacy Policy for details.

Stripe (Payment Processing)

Payment processing is handled by Stripe. When you enter payment information, it is transmitted directly to Stripe and governed by Stripe’s Privacy Policy.

We may also disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of STR Squad, our users, or the public.

Data Retention

We retain your account and property data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (such as billing records, which we retain for 7 years as required by applicable law).

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked back to individual users.

Your Rights

Depending on your location, you may have certain rights regarding your personal data. We acknowledge and respect the rights granted under the General Data Protection Regulation (GDPR) for users in the European Economic Area, and the California Consumer Privacy Act (CCPA) for California residents, including:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your personal data
• The right to restrict or object to processing of your data
• The right to data portability (receive your data in a machine-readable format)
• The right to opt out of the sale of personal information (we do not sell data)

To exercise any of these rights, contact us at legal@strsquad.com. We will respond to verified requests within 30 days.

Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at legal@strsquad.com.