STR·Leads
Legal · Privacy

Privacy Policy

Plain-English version: we collect what we need to run your marketing, we don't sell your data, and we explain every third party we share with below.

Last updated · April 2026

01Who we are

STR Leads is operated by [Company Name], LLC, a Colorado limited liability company ("STR Leads", "we", "us"). We provide a direct-booking website and marketing-attribution platform for short-term rental operators. For privacy questions, email privacy@strleads.com.

02What we collect

From you (account data)

  • Name, email, company name, and billing address.
  • Property details you import or enter — photos, descriptions, pricing, amenities.
  • Payment method, handled by Stripe (we never store full card numbers).

Automatically (usage data)

  • IP address, browser type, device, referring URL, and pages visited on STR Leads domains.
  • Cookies and session-storage values required to keep you logged in and to remember preferences.

From your guests (if you enable tracking)

  • When a guest visits your direct-booking site, we record anonymized page views, click-throughs, UTM parameters, and — on checkout — the booking details you receive yourself.
  • If you enable Meta CAPI or Google Analytics, we forward the same events to those providers on your behalf.

03Third parties we share with

We only share data with providers that help us run the service. Each is bound by a data-processing agreement.

  • Stripe — payment processing. They see billing details; we don't.
  • Meta Pixel & Conversions API (CAPI) — ad-attribution events you choose to forward to your Meta ad account.
  • Google Analytics — optional, off by default; enabled when you connect a GA4 property.
  • Postmark / SendGrid — transactional and marketing email delivery.
  • Cloud hosting — Cloudflare and AWS host the platform and your site.

We do not sell personal data, rent mailing lists, or share data with ad networks for purposes other than your own attribution.

04Cookies and session storage

We use a small number of first-party cookies and session-storage entries:

  • Session — keeps you logged in.
  • Preferences — remembers things like dashboard view state.
  • Attribution — persists UTM parameters across pageviews so we can credit the right channel at booking time.
  • Third-party — Meta Pixel and Google Analytics set their own cookies when enabled. You control these per-property.

05How long we keep data

  • Account data: for as long as your account is active, plus 12 months after cancellation for billing/tax records.
  • Booking and attribution data: 36 months, so year-over-year reporting works. You can request earlier deletion.
  • Email marketing consent: until you unsubscribe, plus 24 months of suppression to honour your preference.

06Your rights

You can request a copy of the personal data we hold, correct anything inaccurate, or ask us to delete it. Email privacy@strleads.com from the address on your account. We'll respond within 30 days. Colorado residents can exercise their CPA rights the same way.

07Security

Data in transit is encrypted with TLS 1.2+. Data at rest is encrypted with AES-256. Admin access requires multi-factor authentication. We follow least-privilege principles internally and conduct periodic access reviews.

08Children

STR Leads is for business use. We don't knowingly collect data from anyone under 16.

09Changes to this policy

If we make material changes, we'll email account owners at least 14 days before they take effect, and post a notice here. Continued use after the effective date constitutes acceptance.

10Contact

Privacy questions: privacy@strleads.com
General: hello@strleads.com
Mailing: [Company Name], LLC · [Street address] · Denver, CO [ZIP] · USA