Privacy Policy

1. Information We Collect

We collect information provided directly by users, including account details (name, email address), property physical specifications, encrypted digital vault access keys (Wi-Fi passwords, lock master PINs), and guest reservation records.

2. How We Use Data

Your data is used solely to deliver software services: synchronizing multi-channel calendar feeds, automating guest messaging sequences, auditing field turnovers, and providing digital welcome guides. We do not sell, rent, or monetize your personal data or your guests' personal information.

3. Cloud Infrastructure & Sub-Processors

We rely on trusted enterprise infrastructure providers to operate the StayStrata platform:

• Vercel, Inc.: Application edge hosting and serverless compute.
• Supabase, Inc. (PostgreSQL): Encrypted database with Row Level Security (RLS) and auth.
• Cloudflare, Inc.: DNS routing, SSL/TLS encryption, and edge DDoS protection.
• Stripe, Inc.: Secure payment tokenization and subscription processing.

4. Database Row Level Security (RLS)

All multi-tenant data is partitioned at the PostgreSQL database layer using Supabase Row Level Security. Property owners, managers, and field staff can only access data belonging to their verified organization.