Privacy Policy

STRVend ("we," "us," or "our") operates strvend.com, a marketplace connecting short-term rental hosts with service vendors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using STRVend, you agree to the collection and use of information in accordance with this policy.

We collect information you provide directly:

• Account information: name, email address, password (hashed), and account type.
• Business profile: company name, description, category, service markets, website, phone, logo, and gallery images.
• Booking data: guest names, email addresses, check-in/check-out dates, and payment references.
• Communications: messages sent through the platform inbox or team messaging.
• Reviews: ratings and written reviews you submit.

We also collect information automatically:

• Usage data: pages visited, features used, vendor profile views.
• Device data: IP address, browser type, operating system, and referring URLs.
• Cookies and similar tracking technologies (see Section 6).

• Provide, operate, and improve the STRVend platform.
• Process bookings and payments through Stripe.
• Send transactional emails via Resend (booking confirmations, inquiry notifications, weekly digests).
• Display vendor profiles and enable host discovery.
• Enforce our Terms of Service and Vendor Agreement.
• Detect and prevent fraud or abuse.
• Respond to your requests and support inquiries.
• Analyze usage trends to improve the platform.

We do not sell your personal data. We may share your information with:

Supabase:

Our database and authentication provider. See supabase.com/privacy.

Stripe:

Payment processing for subscriptions and bookings. See stripe.com/privacy.

Resend:

Transactional email delivery. See resend.com/legal/privacy-policy.

Law enforcement:

We may disclose data if required by law, court order, or to protect rights, property, or safety.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Financial records may be retained for up to 7 years for tax compliance. Booking records may be retained for up to 5 years for dispute resolution.

We use authentication cookies (Supabase session tokens) that are strictly necessary for the platform to function, and Stripe cookies during payment flows. See our full Cookie Policy for details.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate data.
• Deletion: request that we delete your personal data.
• Portability: request your data in a machine-readable format.
• Objection: object to certain types of processing.
• CCPA (California residents): the right to know, delete, and opt out of sale (we do not sell data).

To exercise any of these rights, contact us at legal@strvend.com.

We implement industry-standard security measures including TLS encryption in transit, bcrypt-hashed passwords, and row-level security policies in our database. However, no method of transmission over the internet is 100% secure.

STRVend is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Continued use of STRVend after changes constitutes acceptance.

For privacy questions or to exercise your rights, contact us at legal@strvend.com.