Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains how StayStack ("StayStack," "we," "us," or "our") collects, uses, shares, and protects information when you use our property-management software and related services (the "Service"), including when you connect third-party services such as QuickBooks Online. By using the Service, you agree to the practices described here.

1. Who We Are

StayStack provides AI-native property-management software for rental properties and lodging facilities. The Service is operated by StayStack LLC. If you have questions about this policy or our data practices, contact us at legal@staystack.com.

2. Information We Collect

We collect the following categories of information:

• Account information — such as your name, email address, company name, and credentials used to create and secure your account.
• Usage information — such as the features you use, actions you take, and technical details like device, browser, and log data, which help us operate and improve the Service.
• Property and operational data — information you enter or that the Service generates while you manage your properties, reservations, and operations.
• Connected-service data — information we access on your behalf from third-party services you choose to connect, such as QuickBooks Online (see Section 4).

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Authenticate you and keep your account secure;
• Sync, display, and act on data from services you connect;
• Provide customer support and respond to your requests;
• Monitor performance, detect and prevent abuse, and meet legal obligations.

4. QuickBooks Online and Intuit Data

When you connect your QuickBooks Online account, you authorize StayStack to access certain data in that account through Intuit's official APIs. We access this data only to provide the features you have requested — for example, syncing financial and accounting information related to your properties.

• We access only what is needed. We request the minimum scope required to deliver the connected features.
• Your data is isolated. Intuit data is strictly segregated per customer. It is never shared with, shown to, or used on behalf of any other customer.
• We do not sell it. We do not sell Intuit data, and we do not use it for advertising.
• You stay in control. You may disconnect QuickBooks Online at any time, which revokes our ongoing access (see Section 8).

Our access to and use of Intuit data is also governed by Intuit's applicable terms and policies.

5. How We Share Information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers — trusted vendors who help us operate the Service (such as hosting and infrastructure providers), bound by confidentiality obligations and permitted to use the data only to provide services to us.
• Legal and safety — when required by law, or to protect the rights, safety, and security of StayStack, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Data Security

We take reasonable measures to protect your information. Credentials and access tokens are stored server-side, never exposed in client-side code or browser logs, and are encrypted in transit and at rest. We use authentication safeguards, including multi-factor authentication, and our technical leadership regularly assesses vulnerabilities as part of ongoing development. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard practices.

7. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we take steps to delete or de-identify it.

8. Your Choices and Rights

• Disconnect a service. You can disconnect QuickBooks Online or other connected services at any time, which revokes our ongoing access to that service's data.
• Access and deletion. You may request access to, correction of, or deletion of your personal information, subject to legal limits.
• Communications. You may opt out of non-essential communications.

To exercise any of these rights, contact us at legal@staystack.com.

9. Cookies and Similar Technologies

We use a limited set of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though some features may not function properly without them.

Your choice. The first time you visit this website, a banner asks whether you want to allow analytics cookies. Nothing described in the rest of this section runs until you accept. Until then the analytics and session-replay tools stay switched off and set no cookies. If you decline, the site works exactly as it otherwise would — nothing is withheld and no feature is degraded. You can change your answer at any time using the Cookie settings link in the footer of any page.

Essential cookies are the exception: the small number needed to keep you signed in and to keep the Service secure are always active, because the Service cannot function without them. They are not used for analytics or advertising.

Analytics. We use Google Analytics, deployed through Google Tag Manager, to measure how visitors find and use this website. These tools set cookies that record information such as the pages you view, how long you spend on them, the site or search that referred you, your approximate location derived from your IP address, and basic device and browser details. Google Analytics does not store your full IP address, and we do not use it to identify you personally.

This website analytics data is kept separate from the data we access through connected services. We never send QuickBooks Online data, or any other connected accounting or property data, to Google Analytics or any other advertising or analytics provider.

You can opt out of analytics at any time by blocking cookies in your browser settings, by using a tracking-blocking extension, or by installing Google's official Google Analytics Opt-out Browser Add-on. Opting out does not affect your ability to use the Service. Google's own handling of this data is governed by the Google Privacy Policy.

Product analytics and session replay. We use Hotjar to understand how people actually use this website — which parts of a page draw attention, where visitors get stuck, and where they leave. Hotjar records information such as pages viewed, clicks, taps, mouse movement and scrolling, screen size, device and browser type, referring source, and approximate location derived from your IP address. Some of this is assembled into a session recording: a replay of your visit that we can watch back to diagnose usability problems.

What session recordings do not capture. Hotjar is configured to suppress the text you type into form fields, so the contents of forms — including names, email addresses, and passwords — are not recorded. We do not use recordings to identify individual visitors, and we do not sell or share them.

We do not run session recording on pages that display data from connected services. Recording is limited to our public marketing pages. Screens that show QuickBooks Online information, or any other accounting or property data belonging to you or your guests, are excluded from recording entirely.

You can opt out of Hotjar on every site that uses it via Hotjar's Do Not Track page. Hotjar also honors the “Do Not Track” setting built into most browsers — if you have it enabled, Hotjar will not record your visit. Hotjar's own handling of this data is governed by the Hotjar Privacy Policy.

10. Children's Privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at legal@staystack.com.