Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, payment processing is handled by Stripe — we do not store your credit card details.

Property Data

When you connect your PMS (currently Lodgify), we import property details including descriptions, photos, amenities, pricing, and availability. This data is used to generate your marketing site and power AI guest messaging.

Usage Data

We collect analytics on how you use the platform — pages visited, features used, deployment activity — to improve the product. We use server-side analytics and do not sell this data to third parties.

Guest Data

When guests interact with your marketing site or chat widget, we collect messages and booking information on your behalf. You are the data controller for guest data; we are the data processor.

2. How We Use Your Information

• To provide and maintain the STR Leads platform
• To generate and deploy your marketing site
• To power AI guest messaging with your property knowledge base
• To process subscription payments via Stripe
• To send transactional emails (deploy notifications, booking confirmations)
• To improve the platform based on usage patterns
• To provide customer support

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing
• Cloudflare — for hosting your deployed marketing sites
• Resend — for transactional email delivery
• OpenAI — for AI guest messaging (messages are processed but not used to train models)
• Lodgify — to sync your property data (via your API key)

4. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure password hashing, and access controls. Your Lodgify API key is stored encrypted at rest. We use Sentry for error tracking with PII scrubbing enabled.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days in case you reactivate. After 30 days, account data is permanently deleted. Guest conversation data is retained for 12 months, then automatically purged.

6. Your Rights

You can:

• Access, update, or delete your account data at any time from Settings
• Export your property and guest data
• Disconnect your PMS integration
• Request complete data deletion by contacting us

7. Cookies

The STR Leads dashboard uses essential cookies for authentication. Your deployed marketing sites use minimal analytics cookies. We do not use third-party advertising cookies.

8. Meta Ads & Attribution

If you use our Meta Ads integration, we implement server-side Conversions API (CAPI) tracking on your behalf. This sends conversion events (bookings) from our servers to Meta, not from the guest's browser. Guest personally identifiable information is hashed before transmission per Meta's requirements.

9. Changes to This Policy

We may update this policy as the platform evolves. Significant changes will be communicated via email to all account holders. Continued use of the platform after changes constitutes acceptance.

10. Contact

Questions about this privacy policy? Contact us at [email protected] or use our contact form.