Effective Date: September 24, 2026
Last Updated: September 24, 2026
STREXYL LLC (“STREXYL,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how and why we use it, when and with whom we share it, how we protect it, how long we keep it, and the choices and rights you have. It applies to the STREXYL website at strexyl.com and to all related web pages, features, and services that link to or reference this Privacy Policy (collectively, the “Platform”).
STREXYL operates an online marketplace and communication platform for the short-term rental industry that connects operators, co-hosts, short-term-rental-focused real estate agents, and investors. This Privacy Policy is incorporated into and forms part of the STREXYL Terms of Service. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Platform.
1. Introduction and Scope
This Privacy Policy applies to personal information that STREXYL collects and processes as the controller of that information in connection with the Platform. It does not apply to the practices of third parties that STREXYL does not own or control, including other Users and the third-party services described in this Privacy Policy, each of which handles information under its own terms and privacy policy.
Two categories of information are handled primarily by our providers rather than by STREXYL. Payment information is collected and processed by Stripe, our payment processor, and identity verification information is collected and processed by Stripe Identity. STREXYL does not receive or store full payment card numbers, card security codes, identity document images, or biometric data. These providers process that information under their own terms and privacy policies, and we encourage you to review them.
2. Definitions
The following terms are used throughout this Privacy Policy:
“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. It does not include publicly available information or information that has been de-identified or aggregated so that it can no longer reasonably be linked to you.
“Sensitive personal information” means personal information that reveals certain categories of data, such as a government identifier or biometric information, that receive heightened protection under some United States state privacy laws.
“Processing” means any operation performed on personal information, including collecting, storing, using, disclosing, and deleting it.
“Service provider or processor” means an entity that processes personal information on our behalf and under our instructions, such as our hosting, payment, verification, email, mapping, and artificial intelligence providers.
“Sale” means as defined by applicable United States state privacy laws, the disclosure of personal information to a third party for monetary or other valuable consideration. STREXYL does not sell personal information.
“Share or targeted advertising” means as defined by applicable United States state privacy laws, the disclosure of personal information for cross-context behavioral or targeted advertising. STREXYL does not share personal information for these purposes.
“User” means an individual who accesses or uses the Platform.
3. Eligibility; No One Under Eighteen
The Platform is intended solely for professionals in the United States short-term rental industry, and it is not directed to anyone under the age of eighteen (18). We do not knowingly collect personal information from anyone under eighteen, and we require every User to confirm at sign-up that they are at least eighteen years old. We do not knowingly collect personal information from children under the age of thirteen (13), and the Platform is not designed for or directed to children. If you believe that someone under eighteen has provided us with personal information, please contact us at support@strexyl.com, and we will take steps to delete that information and close any associated account.
4. Information We Collect
We collect information in three ways: information you provide to us directly, information we receive from third parties, and information collected automatically when you use the Platform.
4.1 Information You Provide to Us
You provide information when you create an account, complete your profile, use the Platform, communicate with other Users, and contact us. This includes:
account and profile information, such as your first and last name, email address, date of birth (to confirm you are at least eighteen), password (which we store only in hashed form), the roles you select (such as operator, co-host, investor, or real estate agent), and your city and state;
listing information, including the descriptions, photos, addresses, and financial figures you enter for your Property Listings and Profile Listings, and any external links you choose to include;
communications and content, including messages, files, pinned items, Proposals, agreed deal terms recorded in Deal Rooms, reviews and ratings, and forum posts, comments, and poll responses;
support and correspondence, including the information you provide when you contact us for support or otherwise communicate with us; and
billing-related details you enter through our payment processor, such as your billing name, though your full payment card number and card security code are collected and processed by Stripe and are not received or stored by STREXYL.
4.2 Information From Third Parties
We receive limited information from third parties that help us provide the Platform:
if you choose to sign in with Google or Facebook, we receive basic account information from that provider, such as your name, email address, and a profile identifier, in accordance with the permissions you grant and that provider’s policies;
from Stripe, we receive payment tokens, transaction results, subscription and billing status, and related reference identifiers, but not your full card number or card security code; and
from Stripe Identity, we receive only the result of your identity verification (for example, verified or not verified) and Stripe’s reference numbers. The identity document images, the identity document number, and any biometric selfie data remain with Stripe and are not shared with STREXYL.
4.3 Information Collected Automatically
When you use the Platform, we and our service providers automatically collect certain technical information, including:
device and connection information, such as your Internet Protocol (IP) address, browser type, operating system, and device identifiers;
log and usage information, such as the pages and features you view, the actions you take, search queries, the dates and times of your visits, and referring and exit pages;
cookies and local storage identifiers used to keep you signed in, remember your preferences, and support security and fraud prevention, as described in the section on cookies; and
push notification tokens, if you enable browser push notifications.
4.4 Sensitive Information
The primary sensitive information involved in the Platform is your government-issued identification, which is required for identity verification and is collected and processed by Stripe Identity rather than by STREXYL. As noted above, STREXYL receives only the verification result and reference numbers, and does not receive or store identity document images or biometric data. We use the verification result solely to confirm that you have passed identity verification and to support trust, safety, and fraud prevention on the Platform.
4.5 Information We Do Not Collect
To keep data collection to what the Platform needs, we do not collect the following: Social Security numbers or taxpayer identification numbers; full bank account numbers; health information; precise geolocation from your device; or information from anyone under the age of eighteen. Financial figures shown in Listings are business figures that Users choose to enter about properties and opportunities, and are not your personal financial account information.
5. How We Use Information
We use the information we collect for the following purposes:
to create and manage your account, authenticate you, and provide, operate, and maintain the Platform and its features;
to verify your identity through Stripe Identity and to support trust and safety on the Platform;
to process your subscriptions, listing fees, and upgrades through Stripe, and to send you receipts, billing notices, and related communications;
to enable the core functions of the Platform, including publishing your Listings, powering search and map-based discovery, delivering messages and Proposals, opening Deal Rooms, and displaying reviews, ratings, and forum activity;
to detect, investigate, and prevent scams, fraud, spam, abuse, security incidents, and violations of our Terms of Service, including through automated scanning and human review as described below;
to operate the AI Assistant, which answers questions about the Platform and your own account;
to provide customer support and to respond to your requests, questions, and feedback;
to send you service and transactional communications, and, where you have not opted out, other communications about the Platform;
to maintain, analyze, and improve the Platform, understand how it is used, and develop new features; and
to comply with legal obligations, enforce our Terms of Service, establish, exercise, or defend legal claims, and protect the rights, property, and safety of STREXYL, our Users, and others.
6. Legal Bases and Grounds for Processing
STREXYL serves the United States market. Where a legal basis for processing is relevant, we process personal information on the following grounds: to perform our contract with you and provide the Platform you have requested; with your consent, where we ask for it, such as for certain optional integrations or communications; for our legitimate business interests, such as securing the Platform, preventing fraud and abuse, and improving our services, balanced against your interests and rights; and to comply with our legal obligations. Where we rely on your consent, you may withdraw it at any time, though this will not affect processing already carried out.
7. Automated Scanning, Content Safety, and Automated Decisions
To keep the Platform safe, we use automated systems to scan content such as messages, forum posts and comments, Proposals, Listings, and uploaded files for scams, fraud, prohibited content, and personal contact details that should remain hidden until a deal is reached. This scanning uses a third-party artificial intelligence provider, Anthropic, which processes content through a commercial application programming interface. Anthropic does not use content submitted through this commercial interface to train its models.
As a result of these automated checks, content may be hidden, blocked, withheld, quarantined, or flagged, and files that fail a safety check may be blocked. Content that is flagged as suspicious is escalated for review by authorized STREXYL staff, who make the final decision. These automated measures are limited to content safety and platform integrity; they do not produce legal or similarly significant effects about you, and human review is part of the process for flagged content. Each instance in which authorized staff access reported conversations, Deal Room records, or files is recorded in an audit log.
8. How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising. We disclose personal information only in the following circumstances:
With other Users, as part of the Platform. Your profile, your Listings, and the content you choose to post are visible to other Users as part of how the Platform works. When you communicate with another User, your messages, Proposals, and shared files are visible to that User. Personal contact details and links you include in messages are hidden until a Proposal is accepted and a Deal Room opens, after which the participating Users can see them. Reviews, ratings, and forum posts are visible to other Users. Once you share information with another User, including contact details exchanged in a Deal Room, STREXYL is not responsible for how that User handles, uses, or shares it.
Publicly, to support discovery and search. To help Users find opportunities and to support search-engine visibility, certain information in your profile and your Listings is publicly visible to anyone who visits the Platform, including visitors who do not have an account, and may be indexed by search engines and appear in search results. Non-registered visitors see only limited information, while full details are available to registered, subscribed Users. Please do not include in your profile or Listings any information that you do not want to be publicly available.
With service providers and subprocessors. We share information with the vendors that help us operate the Platform, such as hosting, payment processing, identity verification, email delivery, mapping, and artificial intelligence providers, each of which is described below. These providers may process personal information only as needed to perform services for us and under obligations of confidentiality and security.
For legal and safety reasons. We may disclose information if we believe in good faith that doing so is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms of Service; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of STREXYL, our Users, or others.
In connection with a business transaction. If STREXYL is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy.
With your direction or consent. We may share information in other ways at your direction or with your consent.
9. Service Providers and Subprocessors
We rely on the following service providers to operate the Platform. Each processes only the information needed for its role:
Amazon Web Services provides cloud hosting and file storage. The Platform is hosted in the United States (Ohio region). Uploaded files are stored in private storage and are accessible only through time-limited, signed links, and data is encrypted in transit and at rest.
Stripe provides payment processing and stores and processes your payment card information. STREXYL does not receive or store your full card number or card security code.
Stripe Identity provides identity verification. It processes your identification document and any biometric selfie, and returns to STREXYL only the verification result and reference numbers.
Anthropic provides the artificial intelligence model behind the AI Assistant and the automated content-safety scanning, through a commercial application programming interface that is not used to train its models on submitted content.
Resend provides transactional and service email delivery.
Google provides optional sign-in and, through Google Calendar and Google Meet, scheduling and video meetings when you choose to use them.
Facebook provides optional sign-in when you choose to use it.
Mapbox provides maps and address lookup for search and discovery.
Browser push notification services deliver push notifications if you enable them.
YouTube and Vimeo host Help Center videos that are embedded or linked for your reference.
10. Cookies, Local Storage, and Similar Technologies
We use only the cookies and local storage that the Platform needs to function and to stay secure. Specifically, we use essential and functional storage to keep you signed in, maintain your session, remember your preferences, and support the security and integrity of the Platform, and we use fraud-prevention cookies set by Stripe to help detect and prevent fraudulent activity.
We do not use advertising cookies, cross-site tracking, or third-party analytics or marketing cookies, and we do not use cookies to build advertising profiles or to track you across other websites. Because we do not use non-essential tracking technologies, we do not display a cookie consent banner. You can control or delete cookies through your browser settings, but disabling essential cookies may prevent parts of the Platform from working, including staying signed in.
11. Do Not Track and Global Privacy Control
Some browsers offer a “Do Not Track” signal and some offer a Global Privacy Control signal. Because we do not sell personal information, do not share it for cross-context behavioral or targeted advertising, and do not track you across third-party websites, these signals do not change how the Platform treats your information. Where required by applicable law, we will honor recognized opt-out preference signals to the extent they apply to our processing.
12. Data Storage, Security, and Access Controls
We take reasonable and appropriate administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss. These measures include: encryption of data in transit and at rest; storage of passwords only in hashed form using the bcrypt algorithm; restrictions on the type and size of files that can be uploaded, and storage of uploaded files in private cloud storage accessible only through time-limited, signed links; access controls that limit access to personal information to authorized personnel who need it; audit logging of staff access to reported conversations, Deal Room records, and files; and required identity verification for every User to support trust and safety.
Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly at support@strexyl.com of any suspected unauthorized use of your account.
13. Data Incident Response
We maintain procedures to detect and respond to security incidents. If we become aware of a security incident that affects your personal information, we will assess and contain the incident, take steps to remediate it, and notify affected Users and applicable authorities where and as required by law. The timing and content of any notification will follow the requirements of applicable law.
14. Data Retention
We keep personal information only for as long as it is needed for the purposes described in this Privacy Policy, and then delete or de-identify it, unless a longer period is required or permitted by law. Our general practices are:
we keep your account and profile information for as long as your account is active;
when you request deletion of your account, we purge your personal information within thirty (30) days of the request, except for information we are required or permitted to retain as described below;
we keep records of closed or completed deals for one (1) year to support dispute resolution, safety, and record-keeping;
we keep security and audit logs for two (2) years to support security, fraud prevention, and integrity of the Platform; and
we keep payment and transaction records for as long as required by applicable tax, accounting, and legal obligations.
15. Your Choices and Controls
You have choices about your information:
you can review and update your profile and account information at any time from within the Platform;
you can manage most notification preferences in your settings, although certain service and transactional communications are necessary to use the Platform and cannot be turned off while your account is active;
you can control cookies and local storage through your browser, subject to the limits described above;
you can cancel your subscription at any time from your Membership and billing page; and
you can request deletion of your account and personal information by contacting us at support@strexyl.com or using any account-deletion tool we provide, subject to the retention practices described above.
16. Your United States State Privacy Rights
Depending on where you live, you may have rights under state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and comparable laws in Virginia, Colorado, Connecticut, Utah, and other states. We extend the core rights described here to our Users regardless of state, to the extent they apply to our processing.
16.1 Rights You May Have
Subject to applicable law and certain exceptions, you may have the right to:
know and access the personal information we have collected about you, including the categories of information, the sources, the purposes for collecting it, and the categories of third parties with whom we share it;
request a copy of your personal information in a portable format;
correct inaccurate personal information;
request deletion of your personal information;
opt out of the sale of personal information, the sharing of personal information for cross-context behavioral or targeted advertising, and certain profiling (which do not apply to STREXYL because we do not engage in these activities);
limit the use and disclosure of sensitive personal information to what is necessary to provide the Platform; and
not be discriminated against for exercising your privacy rights.
16.2 How to Exercise Your Rights
You can exercise your rights by contacting us at support@strexyl.com. To protect your information, we will take steps to verify your identity before acting on your request, generally by confirming control of the email address associated with your account and information we already hold. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of the agent’s authorization and verification of your identity. We will respond to your request within the time required by applicable law, generally within forty-five (45) days, and we may extend that period where the law permits, in which case we will let you know. We do not charge a fee to process most requests. If we decline a request, we will explain why, to the extent the law requires. In states that provide a right to appeal a decision, you may appeal by replying to our decision or contacting us at support@strexyl.com, and we will respond as required by law.
16.3 Additional Information for California Residents
In the twelve months before the effective date of this Privacy Policy, we have collected the following categories of personal information, as defined by California law: identifiers, such as name, email address, IP address, and account identifiers; customer records information, such as information you provide when you create an account or make a purchase; commercial information, such as your subscriptions, listing purchases, and transaction history; internet or other electronic network activity information, such as usage and log data; approximate location inferred from IP address; professional or employment-related information, such as your roles and profile details; and audiovisual information, such as photos and files you upload. We collect this information from you, from your device automatically, and from third parties such as sign-in and verification providers, for the business purposes described in the section “How We Use Information.”
We disclose personal information to service providers for business purposes as described in this Privacy Policy. We do not sell personal information, and we do not share personal information for cross-context behavioral or targeted advertising. We use the sensitive personal information we handle (the government-identification verification result) only to provide and secure the Platform and for trust, safety, and fraud prevention, which are uses that do not require an option to limit under California law. California’s “Shine the Light” law allows California residents to request information about disclosures of personal information to third parties for their own direct marketing purposes; we do not make such disclosures. We retain personal information as described in the section “Data Retention.”
16.4 Virginia, Colorado, Connecticut, and Utah
If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have the rights described in the section “Rights You May Have,” subject to that state’s law and exceptions, including the rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling. Because STREXYL does not sell personal information, does not engage in targeted advertising, and does not conduct profiling that produces legal or similarly significant effects, those opt-out rights do not apply to our processing. You may exercise your rights, and residents of states that provide an appeal right may appeal a decision, as described in the section “How to Exercise Your Rights.”
16.5 Nevada
Nevada law allows Nevada residents to opt out of the sale of certain covered information. STREXYL does not sell covered information as defined by Nevada law. If you have questions or wish to submit a request, contact us at support@strexyl.com.
17. International Users and Data Location
The Platform is intended for Users located in the United States, and it is not directed to individuals in the European Union, the European Economic Area, the United Kingdom, or other regions outside the United States. STREXYL stores the personal information it maintains in the United States. Some of the third-party providers we rely on, such as Stripe, Stripe Identity, and Google, are global companies that may process or store certain information outside the United States in the course of providing their services, in which case they are responsible for maintaining appropriate protections under their own terms and privacy policies. If you access the Platform from outside the United States, you do so on your own initiative and are responsible for compliance with local laws, and you understand that your information will be processed in the United States and, to the limited extent described above, by our providers elsewhere, where data-protection laws may differ from those in your location.
18. Third-Party Links and Services
The Platform may contain links that Users include in Listings or profiles, such as links to external booking sites or personal websites, and it integrates with third-party services such as those listed above. This Privacy Policy does not apply to any third-party website or service. We do not control, and are not responsible for, the privacy practices of third parties. We encourage you to review the privacy policy of any third-party website or service before providing your information to it.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or applicable law. When we make changes, we will revise the “Last Updated” date at the top of this Privacy Policy and, where the changes are material, we will provide additional notice, such as by email or an in-platform notice. The current version is always available on the Platform, and your continued use of the Platform after an update takes effect means that you acknowledge the updated Privacy Policy.
20. Contact Us
STREXYL has not designated a formal Data Protection Officer. Privacy oversight is handled internally by STREXYL’s founder and development team, with legal counsel consulted as needed.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, including a request to access or delete your information, you can contact us at:
STREXYL LLC
971 US Highway 202N, Ste N
Branchburg, NJ 08876
Email: support@strexyl.com