Privacy Policy

STR Comply ("Company," "we," "us," or "our") operates strcomply.ai and the STR Comply platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using STR Comply, you consent to the practices described herein.

1. Information We Collect

Information you provide directly:

• Full name and email address (account registration)
• Property details including address, city, and rental platform
• Billing information processed securely by Creem.io (we do not store payment card data)
• Communications you send to our support team

Information collected automatically:

• IP address and approximate location
• Browser type and device information
• Pages visited and features used
• Session duration and click patterns
• Compliance checklist usage and credit activity

Information from third parties:

• Payment confirmations from Creem.io
• Authentication data from Supabase

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the STR Comply platform
• Generate personalized compliance checklists for your properties
• Monitor city-specific STR rules and send you relevant alerts
• Process subscription payments and credit transactions
• Respond to support requests and communications
• Improve our platform features and user experience
• Send service-related emails including alerts and updates
• Comply with legal obligations
• Prevent fraud and abuse

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (CCPA / State Privacy Laws)

For California residents and users in other states with comprehensive privacy laws, we process your data under the following legal bases:

• Contractual necessity: Processing required to deliver the Service you subscribed to
• Legitimate interests: Improving our platform, preventing fraud, ensuring security
• Legal compliance: Meeting applicable federal and state legal obligations
• Consent: Where you have expressly agreed to specific processing activities

4. Your Privacy Rights

Depending on your state of residence, you may have the following rights:

Right to Know: Request disclosure of personal information we collect, use, disclose, and sell.

Right to Delete: Request deletion of your personal information, subject to certain exceptions.

Right to Correct: Request correction of inaccurate personal information we maintain about you.

Right to Opt-Out: We do not sell or share personal information for cross-context behavioral advertising.

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at: privacy@strcomply.ai

We will respond to verified requests within 45 days as required by law.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account deletion:

• Account data is deleted within 30 days
• Billing records are retained for 7 years as required by law
• Anonymized usage data may be retained indefinitely

6. Data Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Row-level security in our database
• Secure authentication via Supabase
• Payment processing via PCI-compliant Creem.io — we never store card data
• Regular security reviews

Despite these measures, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.

7. Third-Party Services

We use the following third-party service providers who may process your data:

Each provider maintains their own privacy practices. We execute Data Processing Agreements with all sub-processors handling personal data.

8. Cookies and Tracking

We use essential cookies required for platform functionality including:

• Authentication session cookies
• User preference storage

We do not use third-party advertising cookies or cross-site tracking. You may disable cookies in your browser settings, which may affect platform functionality.

9. Children's Privacy

STR Comply is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn we have collected information from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our platform at least 30 days before changes take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, requests, or concerns:

STR Comply
Email: support@strcomply.ai
Support: support@strcomply.ai
Website: strcomply.ai

For California residents, you may also submit requests via:
Email: support@strcomply.ai
Subject line: "CCPA Privacy Request"