Privacy policy

StayTrex keeps books for short-term rental hosts. To do that it reads your reservation data from your property management software and your transactions from your bank. This page says what we collect, what we do with it, and how you get rid of it.

What we collect

• Your email address and password hash when you create an account.
• Reservation details from your property management software (Hospitable): booking dates, guest-facing listing names, payout amounts and fee breakdowns. We do not store guest names, messages or contact details.
• Bank transactions for the accounts you choose to connect or import: date, amount, description and the bank's reference number. We do not store your bank login. SimpleFIN or Plaid holds that; we hold only an access token you can revoke.
• The categories, matches and notes you enter in the app.
• Standard server logs (IP address, browser, pages requested) kept for up to 30 days for security and debugging.

What we do with it

• Match payouts to reservations, categorize expenses, and produce your reports. That is the whole purpose.
• Email you about your account: invitations, password resets, and sync problems.
• Nothing else. We do not sell, rent, share or use your financial data for advertising, benchmarking or training models.

Who else can see it

• People you invite to your organization see the same books you do, until you remove them.
• Service providers that run the product: Supabase (database and authentication, US region), Vercel (hosting), SimpleFIN and, later, Plaid (bank connections), Hospitable (your property management software). Each sees only what it needs to do its job.
• Authorities, if the law requires it and the request is valid. We will tell you unless we are legally barred from doing so.

How it is protected

Data is encrypted in transit and at rest. Every table is isolated per organization at the database level, so one host's data cannot be read by another's account. Access tokens for connected services are stored server-side and never sent to your browser.

Deleting your data

Settings → Delete organization removes every reservation, transaction, match, report and connection for your organization, immediately and permanently. Backups age out within 30 days. You can also email support@staytrex.com and we will do it for you.

Cookies

We use one cookie, to keep you signed in. No analytics or advertising cookies.

Changes

If this policy changes in a way that affects you, we will email the owner of each organization before it takes effect.

Contact

StayTrex is operated by Opdolow LLC, Boise, Idaho. Questions: support@staytrex.com.