Your report data stays yours.

Notice at collection

Quarterly STR collects account identity, STRO license and property details, booking activity, uploaded files, and limited technical data to analyze exports, generate report packs, prevent abuse, and provide account history. We do not sell personal information or share it for cross-context behavioral advertising.

Information we collect

Account information

When you sign in, we receive your email address and, when available, display name from the sign-in provider. We store your profile, workspace membership and role, plan, access status, reminder choices, and account timestamps. A workspace administrator can see the name, email, and role of people invited to or participating in that workspace.

Report and property information

We process the STRO license, tier, dwelling address, ZIP code, host and local-contact names, reporting period, reservation identifiers, dates, nights, status, platform, filenames, and validation results you provide. Guest names are not required and should not be uploaded.

Technical information

We use a strictly necessary session cookie, hashed session or network identifiers, request timestamps, and usage counts for authentication continuity, ownership migration, security, rate limiting, and coarse first-party product events such as starting the builder or requesting an export. Product events exclude booking rows, addresses, license numbers, filenames, and raw uploaded values. Quarterly STR does not use advertising or cross-site behavioral analytics.

How we use information

• Normalize booking exports and calculate report-period totals.
• Detect duplicates, overlaps, invalid dates, exclusions, and review items.
• Create downloadable draft workpapers and normalized audit files.
• Maintain private account history across devices.
• Coordinate property and filing status with teammates you authorize.
• Remember deadline preferences and provide in-app or downloadable-calendar reminders.
• Secure the service, enforce limits, troubleshoot failures, and respond to support.

Optional AI processing

CSV analysis is deterministic and is not sent to an AI model. If you explicitly opt in and select a PDF, Quarterly STR sends that PDF to Google Gemini to extract reservation rows. The extracted rows then pass through the same deterministic validation engine as CSV data. Do not use PDF smart import if you do not want the selected document processed by Google.

Service providers and disclosures

We disclose data only as needed to providers operating the service: OpenAI for Sites hosting and account sign-in, Cloudflare-backed database and private object storage, Stripe when you affirmatively start checkout or manage billing, and Google Gemini when you opt into PDF smart import. Providers process information under their own terms and privacy commitments. We may also disclose information when legally required or to protect the service and its users.

Retention and deletion

Founding-beta and single-quarter report packs expire after 30 days. Annual and manager plans are designed for up to 400 days of report retention once billing opens. Expired report objects are deleted from product storage. Short-lived rate-limit records are periodically removed. Your account remains until you delete it. Coarse product events expire after 90 days. A manager access request is retained until it is fulfilled, you ask us to remove it, or it is no longer needed for the launch purpose.

You can delete an individual report or request permanent account deletion from the account page. Active subscriptions must be managed first, and owners must transfer or remove shared workspace members so deleting one account cannot destroy another person’s records. You may also email us for access, correction, or deletion help.

California privacy rights

California residents may have rights to know, access, correct, or delete personal information; to limit certain uses of sensitive information; and to receive equal service when exercising privacy rights. Quarterly STR does not sell personal information or share it for targeted advertising. Submit a request from your account or email hello@quarterlystr.com. We may verify your identity before completing a request.

Security, children, and changes

We use access controls, private storage, request validation, hashed access identifiers, and limited retention. No system can guarantee absolute security. Quarterly STR is intended for adults managing licensed short-term rentals and is not directed to children under 18.

We may update this notice as the product, providers, or legal requirements change. Material changes will be reflected by a new effective date and, when appropriate, an in-product notice.