Stay Stax ("Stay Stax," "we," "us") operates staystax.com and the Stay Stax application at app.staystax.com (the "Service"). This policy explains what we collect, why, and your choices.
1. Information we collect.
- Account information: name, email, password (hashed), and organization details you provide at sign-up.
- Billing information: processed by our payment processor (Stripe). We do not store full card numbers on our servers.
- Data you input or upload: deals, units, contacts, notes, and market data files (such as AirDNA exports) you bring into the Service.
- Usage data: log data, device and browser information, and product interactions, used to operate and improve the Service.
- Cookies and analytics: essential cookies for authentication and, if enabled, privacy-respecting analytics to understand site usage.
2. How we use information.
To provide and maintain the Service; authenticate you; process payments; send transactional and service messages; provide support; analyze and improve features; and comply with legal obligations. We do not sell your personal information.
3. How we share information.
With service providers ("subprocessors") who help us run the Service, under contract and only as needed: hosting and database (Supabase), application hosting (Vercel), payment processing (Stripe), and transactional email (Resend). We may disclose information if required by law or to protect rights and safety. If Stay Stax is involved in a merger or acquisition, information may transfer as part of that transaction.
4. Data retention.
We keep your information while your account is active and as needed to provide the Service. You may request deletion of your account and associated data, subject to legal retention requirements.
5. Your rights.
Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to opt out of certain processing. To exercise these rights, email support@staystax.com. California residents (CCPA/CPRA) and individuals in the EU/UK (GDPR) have additional rights described by those laws; we honor verified requests.
6. Security.
We use industry-standard measures including encryption in transit, access controls, and row-level data isolation. No system is perfectly secure, and we cannot guarantee absolute security.
7. Your data ownership.
The deal, unit, and contact data you create or upload is yours. We process it on your behalf to provide the Service and do not claim ownership of it.
8. Children.
The Service is for business use by adults and is not directed to anyone under 18. We do not knowingly collect information from children.
9. Changes.
We may update this policy; material changes will be posted here with a new "last updated" date.
10. Contact.
Questions about privacy: support@staystax.com.