Privacy Policy

Last updated: 23 October 2026

1. Who we are

STRwhatwhere (“we”, “us”) is a software service operated by [The Orange Cabins LLC] that helps short-term-rental operators record and search what’s inside their properties. Questions? Email privacy@strwhatwhere.com.

2. Information we collect

• Account data — your name, email, company name, and password (stored hashed).
• Workspace content — the properties, rooms, items, locations, make/model and serial numbers, notes, pinned information, and photos you add.
• Imported data — if you connect a third-party service (e.g. Hospitable) with your own API key, listing and image data we import on your behalf.
• Usage & device data — log data, IP address, browser type, and how you use the app, for security and reliability.
• Cookies — see our Cookie Policy.

3. How we use your information

To provide and secure the service, operate your workspace, generate AI tags and answers you request, process payments, send service communications, prevent abuse, and meet legal obligations. We do not sell your personal information.

4. AI processing

When you use AI features (such as photo tagging or Ask-AI), the relevant photos and text are sent to our AI provider (Anthropic) to generate the result. Under Anthropic’s commercial API terms, your inputs and outputs are not used to train their models. AI output can be imperfect — verify anything important before relying on it. We cap AI processing per account to protect you from unexpected usage.

5. Sub-processors

We use trusted providers to run STRwhatwhere:

• Laravel Cloud — application hosting & managed database.
• Cloudflare — content delivery, image storage (R2), DNS, and security/DDoS protection.
• Anthropic — AI photo tagging and question answering.
• Stripe — subscription billing and payment processing (we never store full card numbers).
• [Email provider] — transactional email.
• Hospitable — only when you choose to connect it, to import your listings and images.

6. Your third-party credentials

If you add your own API keys (for example a Hospitable key), we store them encrypted and use them only to perform the actions you request. You are responsible for your keys and for complying with those services’ terms.

7. Data isolation & sharing

Each customer’s data is logically isolated; one account cannot access another’s. We share data only with the sub-processors above, when you direct us to, or when required by law.

8. Retention & your rights

We keep your data while your account is active. You can export or delete your workspace data, and depending on where you live you may have rights to access, correct, delete, or port your personal data (e.g. under GDPR or CCPA). To exercise these, email privacy@strwhatwhere.com.

9. Security

We use encryption in transit (TLS), hashed passwords, access controls, and tenant isolation. No system is perfectly secure, but we work to protect your data and will notify you of a breach as required by law.

10. Children

STRwhatwhere is a business tool not intended for anyone under 18, and we don’t knowingly collect data from children.

11. Changes

We’ll post any changes here and update the date above; significant changes will be communicated to account owners.

12. Contact

[The Orange Cabins LLC] · privacy@strwhatwhere.com · [mailing address]