Privacy Policy

Last updated: 20 October, 2026

We respect your privacy. This policy explains how we handle your data both when you use the Slipstream platform and when you subscribe to our emails.

What We Collect

Account data:

• Email address (required) and name (optional)
• Company name and your role within it
• Authentication data: a password hash, or the provider identity if you sign in with Google, Facebook, or Apple

Property and booking data you connect or import, including via the Hospitable API:

• Property listings, descriptions, amenities, photos, and locations
• Reservations, stay dates, nightly rates, payouts, fees, and adjustments
• Guest reviews and their text
• Guest details: name, email address, phone number, and profile photo, where your connected platform provides them

Usage data:

• Email opens and clicks (via Resend)
• Server logs: IP address, browser type, timestamp (via Vercel)
• Feature usage and AI credit consumption, for billing and capacity planning
• Which pages and features you open, to understand which parts of the Service are used and improve them

Why & How We Use It

• Provide the Service: reporting, reconciliation, and performance analysis for your properties
• Generate insights and recommendations, including via AI models (see below)
• Send service notices, and rental updates or offers you requested
• Bill you accurately and prevent abuse
• Comply with legal obligations (e.g., CAN-SPAM)

Guest Data & Your Role

Where you import bookings, the guest personal data in your account is data you control and we process on your behalf. We use it only to deliver the Service to you — never to market to your guests, and never to build profiles across customers. If a guest exercises a right to erasure, we remove their identifying details while retaining anonymous stay totals so your historical reporting stays accurate.

Who Can Access Your Data

Our support staff. To resolve issues you report or to configure the Service for you, authorized Slipstream staff may open a time-limited support session that presents your account as you see it. Each session requires a written business reason, is capped at two hours and cannot be extended, and is logged with the staff member's identity, the reason given, and the start and end times. Staff cannot retrieve your password, view stored third-party API keys, change billing, or alter account permissions during such a session. You can review the complete history of these sessions under Settings → Account access. We do not use support sessions for marketing, analytics, or product-usage measurement.

Who Processes Your Data

• Vercel: Hosting, and AI model routing via Vercel AI Gateway
• Neon: Database hosting
• Resend: Email delivery
• Hospitable: Source of the property and reservation data you connect

AI features send relevant excerpts of your property and review data to third-party language models through Vercel AI Gateway under zero-data-retention terms. Your data is not used to train those models.

We do not sell or rent your data, and we do not share it with third parties for their own marketing.

Your Rights

• Unsubscribe: Click the link in any email, or visit slipstream.rentals/unsubscribe
• Access or export your data: Email us at concierge@slipstream.rentals
• Delete your data: Email us at concierge@slipstream.rentals. Closing your account removes your property, booking, and guest data.
• Review staff access: Settings → Account access shows every support session opened in your account
• CCPA/CPRA (California residents): You may request disclosure or deletion of personal information.