Privacy Policy

Last updated: June 29, 2026

This Privacy Policy explains how StayStack ("StayStack," "we," "us," or "our") collects, uses, shares, and protects information when you use our property-management software and related services (the "Service"), including when you connect third-party services such as QuickBooks Online. By using the Service, you agree to the practices described here.

1. Who We Are

StayStack provides AI-native property-management software for rental properties and lodging facilities. The Service is operated by StayStack LLC. If you have questions about this policy or our data practices, contact us at legal@staystack.com.

2. Information We Collect

We collect the following categories of information:

• Account information — such as your name, email address, company name, and credentials used to create and secure your account.
• Usage information — such as the features you use, actions you take, and technical details like device, browser, and log data, which help us operate and improve the Service.
• Property and operational data — information you enter or that the Service generates while you manage your properties, reservations, and operations.
• Connected-service data — information we access on your behalf from third-party services you choose to connect, such as QuickBooks Online (see Section 4).

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Authenticate you and keep your account secure;
• Sync, display, and act on data from services you connect;
• Provide customer support and respond to your requests;
• Monitor performance, detect and prevent abuse, and meet legal obligations.

4. QuickBooks Online and Intuit Data

When you connect your QuickBooks Online account, you authorize StayStack to access certain data in that account through Intuit's official APIs. We access this data only to provide the features you have requested — for example, syncing financial and accounting information related to your properties.

• We access only what is needed. We request the minimum scope required to deliver the connected features.
• Your data is isolated. Intuit data is strictly segregated per customer. It is never shared with, shown to, or used on behalf of any other customer.
• We do not sell it. We do not sell Intuit data, and we do not use it for advertising.
• You stay in control. You may disconnect QuickBooks Online at any time, which revokes our ongoing access (see Section 8).

Our access to and use of Intuit data is also governed by Intuit's applicable terms and policies.

5. How We Share Information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers — trusted vendors who help us operate the Service (such as hosting and infrastructure providers), bound by confidentiality obligations and permitted to use the data only to provide services to us.
• Legal and safety — when required by law, or to protect the rights, safety, and security of StayStack, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Data Security

We take reasonable measures to protect your information. Credentials and access tokens are stored server-side, never exposed in client-side code or browser logs, and are encrypted in transit and at rest. We use authentication safeguards, including multi-factor authentication, and our technical leadership regularly assesses vulnerabilities as part of ongoing development. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard practices.

7. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we take steps to delete or de-identify it.

8. Your Choices and Rights

• Disconnect a service. You can disconnect QuickBooks Online or other connected services at any time, which revokes our ongoing access to that service's data.
• Access and deletion. You may request access to, correction of, or deletion of your personal information, subject to legal limits.
• Communications. You may opt out of non-essential communications.

To exercise any of these rights, contact us at legal@staystack.com.

9. Cookies and Similar Technologies

We use a limited set of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though some features may not function properly without them.

10. Children's Privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at legal@staystack.com.