Privacy Policy

FlowSTR ("we", "us", "the Service") provides scheduling, marketplace, payments, and messaging tools for short-term-rental property managers and the service providers they hire. We take privacy seriously and only collect what we need to run the platform you signed up for.

1. Information we collect

Account info

• Identity & contact — name, email, phone, business name, role.
• Login — hashed password, session cookies, IP / browser metadata for security.

Operational data

• Properties & calendars — units, iCal feeds, bookings, blocked dates.
• Clients & jobs — names, contact info, addresses, quotes, invoices, payments, messages.
• Marketplace — requests posted, bids placed, ratings & reviews, connection history.

Payments

We use Stripe for all payment processing. Card details are sent directly to Stripe and never touch FlowSTR servers. We store only Stripe's reference IDs and payment status.

Verification (service providers)

If you opt into provider verification we collect the attestations and consents required to begin background screening (legal business name, EIN if supplied, US-work-authorization attestation, background-check consent, insurance attestation). Actual ID and background checks are run by vetted third parties (e.g. Stripe Identity, Checkr); we store only their reference IDs and the resulting status.

2. How we use it

• To run the features you use — calendars sync, marketplace matches, messages route, payments flow, emails send.
• To keep the platform secure and prevent abuse.
• To improve the product — aggregated, anonymized usage signals only; never sold.
• To send transactional emails (quote sent, bid received, payment confirmation). We don't run marketing email campaigns from your data.

3. Sharing

We don't sell or rent your data. We share only with the service providers required to run FlowSTR:

• Stripe — payments & Connect onboarding.
• Resend — transactional email delivery.
• Vercel + Neon — hosting and database.
• Google Places — address autocomplete (the query string only).
• If/when you opt into verification: Stripe Identity and Checkr.

On the marketplace, property managers see basic provider profile info (name, business, segment, area, ratings, verification status) and vice-versa — that's the whole point of the marketplace.

4. Your choices

• Access & export — email us and we'll send your data within 30 days.
• Delete — email us and we'll wipe your account (we retain a minimum amount for tax/audit obligations).
• Email opt-outs — you can unsubscribe from any non-essential notification from your account settings.

5. Security

Data is encrypted in transit (HTTPS) and at rest (managed database encryption). Passwords are hashed. We follow least-privilege access internally and review the small list of people with production access regularly.

6. Children

FlowSTR is not for use by anyone under 18.

7. Changes

We'll post any material changes to this page and update the "Last Updated" date. Continued use means you accept the updated policy.

8. Contact

Questions, requests, or concerns: privacy@flow-str.com.

This is the plain-language version we keep current. If we publish a separate legal-language version we'll link it here.