Privacy Policy

InnTrax ("we," "us," or "our") operates a property management platform for hospitality businesses and landlords. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.

By using InnTrax, you agree to the practices described here. If you are a property manager using InnTrax, you are also responsible for ensuring your guests, tenants, and staff are informed of how their data is handled through your use of our platform.

Account information. When you create an InnTrax account we collect your name, email address, and password. Billing details are processed by Stripe and never stored on InnTrax servers.

Property and business information. Information you enter about your property — name, address, unit configurations, pricing, and settings.

Guest and tenant data. Names, email addresses, phone numbers, room assignments, dietary preferences, and payment records entered as you manage bookings and tenancies. You are the data controller for this information; we process it on your behalf.

Staff data. Names, email addresses, and role information for team members you add to your property.

Usage and technical data. Pages visited, features used, IP addresses, browser type, and referring URLs — collected automatically for security and platform improvement.

We use collected information to:

• Provide, operate, and improve the InnTrax platform
• Process subscription payments through Stripe
• Send transactional emails (booking confirmations, checkout links, payment reminders) through Resend
• Provide customer support via support@inntrax.com
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your data or your guests' data. We do not use personal information for advertising.

We share information only with trusted service providers who process data on our behalf:

• Supabase — database hosting and file storage (US servers)
• Stripe — subscription payment processing
• Resend — transactional email delivery
• Vercel — application hosting

Property payment integrations. Properties may connect their own payment providers (Stripe, Square, PayPal, etc.) to collect rent and guest payments. InnTrax does not process or hold these funds — the relationship is directly between the property and their chosen provider.

Legal requirements. We may disclose information when required by law or to protect the safety of any person.

Business transfers. In a merger or acquisition, user data may transfer to the new entity. Affected users will be notified beforehand.

We retain account and property data while your account is active. After cancellation, data is kept for 90 days to allow reactivation, then permanently deleted. Guest and tenant records may be deleted by the property manager at any time through InnTrax. Backup copies may persist for up to 30 additional days.

We protect your information through:

• TLS encryption for all data in transit
• Row-level security ensuring each property accesses only its own data
• Secure authentication via Supabase Auth
• Payment data handled exclusively by Stripe — never touches InnTrax servers

No system is completely secure. If you believe your account has been compromised, contact support@inntrax.com immediately.

You may have the following rights depending on your location:

• Access — request a copy of your personal information
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data, subject to legal obligations
• Portability — request your data in a machine-readable format
• Objection — object to certain types of processing

Email support@inntrax.com to exercise any of these rights. We respond within 30 days. Guests and tenants whose data was entered by a property should contact that property directly — they control that data.

InnTrax uses only essential session cookies required for authentication. We do not use advertising cookies, tracking pixels, or third-party analytics.

InnTrax is not directed at children under 13 and we do not knowingly collect their personal information. Contact support@inntrax.com if you believe a child has provided us data and we will delete it promptly.

We may update this policy periodically. Material changes will be communicated to active account holders by email, and the "Last updated" date above will reflect the revision. Continued use of InnTrax after changes are posted constitutes acceptance.

Questions about this policy or your data: