Privacy Policy
Last updated: October 4, 2026
Flipstr (“Flipstr,” “we,” “us”) provides software that helps short-term rental (STR) operators manage cleaning, laundry, and turnover operations. This policy explains what data we collect, how we use it, and who we share it with. It describes our actual practices — we do not sell your data and we do not run third-party advertising or behavioral analytics SDKs.
Information we collect
- Account information. Name, email address, and password (stored hashed) for the people you invite — admins, cleaners, and laundry staff.
- Phone number. Optional. It is only entered on the web, on a profile or an invitation; the mobile app never asks for it.
- Operational data. Property details, reservation and turnover schedules, cleaning and laundry job records, checklists, task notes, and photos uploaded to verify completed work.
- Messages. Team chat messages and messages on jobs, with the sender's name and the time they were sent.
- Crew pay records. Pay rates, what crew members are owed and paid for their jobs, payout status and the payment method used, and the payment handles (Venmo, PayPal, Cash App or Zelle) crew members save so they can be paid.
- Device information for notifications. The mobile app creates a random ID for each installation and sends it with the platform (iOS or Android) and the app version. If you allow notifications, it also sends the device's push token; if notifications can't be set up, it sends the reason. We use these to deliver notifications to your devices and to show your team's admins when notifications aren't reaching a device.
- Property management system (PMS) data. When you connect a PMS such as Hostaway, we sync listings, reservations, and guest stay timing in order to create and schedule jobs automatically.
- Billing information. Subscription status and the number of active units. Card and payment details are entered directly with our payment processor (Stripe) and are never stored on Flipstr's servers.
How we use information
- Operate the service: create, assign, and track turnover jobs.
- Sync your PMS so jobs reflect real reservations and check-out times.
- Send transactional email (job assignments, account, and billing notifications) through our email provider.
- Process subscription billing based on your active units.
- Maintain security, prevent abuse, and provide support.
We do not use your data for advertising and we do not include third-party ad or analytics tracking SDKs in the product.
Service providers we share data with
We share data only with the processors required to run the service:
- Convex — our application database and backend, hosted on Amazon Web Services in the United States. Your operational and account data is stored here.
- Stripe — payment processing and subscription management. Stripe handles card data directly under its own privacy policy.
- Hostaway (and other PMS providers you choose to connect) — for syncing listings, reservations, and guest stay timing.
- Resend — for delivering transactional email on our behalf.
- Expo — Expo's push notification service delivers notifications to the mobile app through Apple Push Notification service on iOS and Firebase Cloud Messaging (Google) on Android. Each notification carries the device's push token, the notification's title and text, and internal IDs the app uses to open the right screen.
We may also disclose information if required by law or to protect the rights, safety, and property of Flipstr or its users.
Where data is stored
Application data is stored in the United States on infrastructure operated by Convex on Amazon Web Services. If you access Flipstr from outside the United States, your data will be transferred to and processed in the United States.
Data retention
We retain account and operational data for as long as your account is active.
Deleting your account. You can delete your account yourself in the mobile app (Settings, then Delete account) or on the web; see how to delete your account. Deletion takes effect immediately and signs you out on every device. We delete your login (password and Google sign-in), your name, email address, phone number and profile photo, your team memberships, device and notification settings, your notifications, your saved payment handles, and pending invitations sent to your email address.
The business records of work you did for a team stay with that team, because they are the team's records too: jobs you completed or that were cancelled, pay and payout records, photos you took on jobs, and messages you sent. Content reports you made, and reports other members made about you or something you posted, also stay with the team as its safety record. Your name is removed from them and they show you as “Former member”. You are taken off jobs that have not happened yet, so the team can assign someone else.
If you are the only owner of a team, you first make another member the owner or delete the team. Deleting a team permanently deletes its properties, jobs, photos, pay records, chat and settings, and cancels its subscription. Our payment processor, Stripe, keeps its own records of past payments where the law requires it.
Your rights
You may request access to, correction of, or deletion of your personal data by contacting us. You can also delete your account yourself at any time, as described above. Team owners and admins can remove team members and delete operational records from within the app.
Children's privacy
Flipstr is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
Contact
Questions about this policy or your data? Email privacy@flipstr.co.