Privacy Policy

Effective date: July 24, 2026

Template for legal review. This document is a plain-language template provided for convenience. It has not been reviewed by an attorney and should be reviewed by qualified legal counsel before you rely on it in production.

This Privacy Policy explains how Gray Haus Tech ("we," "us," or "our") collects, uses, and shares information in connection with STR Expense Tracker (the "Service"). It works together with our Terms & Conditions.

1. Information We Collect

2. How We Use Information

We use information to provide, secure, and improve the Service; to process payments and manage subscriptions; to generate the reports you request; to communicate with you about your account; and to comply with legal obligations.

3. How We Share Information

We share information with service providers who help us operate the Service (for example, hosting, database, email delivery, and payment processing), under contracts that limit their use of the information. We may share information to comply with law, protect rights and safety, or in connection with a business transfer.

4. Affiliated-Marketing Disclosure

By creating an account or using the platform, you acknowledge that your account, contact, and business information may be shared with Gray Haus Tech and its affiliated companies to provide related services and communicate relevant affiliated offers. Gmail credentials, complete payment-card information, receipt images, and transaction-level financial records are not shared for affiliated marketing purposes. Users may opt out of marketing communications at any time.

5. Your Marketing Choices & Opt-Out

You can opt out of marketing communications at any time by:

We honor opt-out requests promptly. Opting out of marketing does not stop transactional messages about your account, billing, or security.

6. Data Security & Tenant Isolation

Each account's data is isolated from every other account, and access is enforced on the server for every request. Payment card data is handled by Stripe; any Gmail connection uses Google's official OAuth flow and stores tokens in encrypted form. We will never ask for your Gmail password. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

7. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account by contacting support.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

9. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the effective date above and, where appropriate, notify you.

11. Contact Us

Questions about this Privacy Policy? Contact us at support@strexpensetracker.com. STR Expense Tracker is property of Gray Haus Tech.