Privacy Policy

Introduction

Welcome to STR Loophole, a mobile application owned and operated by Agents Invest LLC ("we," "our," or "us"). Your privacy is important to us, and this Privacy Policy outlines how we collect, use, and protect your personal information when you use our mobile application (the "App"). By using STR Loophole, you agree to the collection and use of information in accordance with this policy.

Information We Collect

When you use STR Loophole, we may collect the following types of information:

• Personal Information: This may include your name, email address, and any other information you provide when signing up for the App.
• Calendar Access: With your explicit permission, we access your calendar to retrieve scheduled events. This allows you to log qualifying short-term rental activities for the STR Loophole with the IRS.
• Usage Data: We may collect data related to your usage of the App, such as log timestamps, event logs, and interactions with the App's features.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the STR Loophole App.
• Display a list of your scheduled events inside the App to help you track and log qualifying short-term rental activities for the STR Loophole.
• Improve user experience and enhance App functionality.
• Respond to user inquiries and provide support.

Calendar Access and Data Usage

STR Loophole requests access to your calendar only with your explicit consent. The purpose of this access is solely to:

• Retrieve and display a list of your scheduled events within the App.
• Help you log qualifying short-term rental activities for IRS compliance.

We do not share, sell, or distribute your calendar data to any third parties. Your calendar information remains private and is used exclusively within the App to provide the intended functionality.

Data Security

We take appropriate technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. However, no data transmission over the internet or mobile networks can be guaranteed as completely secure. By using the App, you acknowledge that you provide your information at your own risk.

Third-Party Services and Recipients

The STR Loophole App does not sell user data or share it with third parties for marketing purposes. We do use the following third-party service providers to operate the App, each of which processes data on our behalf and only for that purpose:

• Google Firebase (Authentication, Firestore database, and Cloud Functions) — stores your account, activities, properties, and calendar-connection records, and hosts the backend that powers the App and its AI Assistant integration.
• Google Calendar API — if you connect your Google Calendar, we use Google's API to read your calendar events on your behalf, solely to help you log qualifying activities.

If you choose to connect an AI Assistant (ChatGPT, Claude) to your account, additional data is shared with that AI provider as described in "AI Assistant Integrations" below. This only happens if you explicitly opt in to that integration.

AI Assistant Integrations (ChatGPT, Claude)

STR Loophole offers an optional integration that lets you connect STR Loophole to AI assistants such as OpenAI's ChatGPT and Anthropic's Claude ("AI Assistants"). This integration is opt-in only: nothing about your account or activity is shared with an AI Assistant unless you explicitly connect STR Loophole as an app or connector within that AI Assistant's own settings and sign in with your STR Loophole credentials.

Once connected, the AI Assistant can only take the following actions, and only when you ask it to do something involving STR Loophole — it does not access your account in the background:

• List your properties: reads your properties (name, address, and yearly hour goal).
• Add a property: at your request, the assistant can create a new property in your account (address, nickname, and hour goal).
• Log a new activity: at your request, the assistant can write a new logged activity to your account (description, activity type, duration, date, and property).
• List your logged activities: reads your existing activities (descriptions, activity types, durations, dates, and associated property), optionally filtered by date range or property.
• Get your progress: reads each property's hours for a given year against its 100 or 500 hour material participation goal.
• Sync your calendar: only if you already connected Google Calendar from the STR Loophole web app, and only if you ask the assistant to sync, it triggers a sync that fetches new calendar events into your account. The AI Assistant never sees your raw calendar contents directly and cannot start a new Google Calendar connection itself.
• Suggest activities from email: if your AI Assistant can read your email through its own features and you ask it to, it can send STR Loophole a short summary of emails that show rental work (subject, summary, sender, date, and estimated duration). These are stored only as suggestions in your account; nothing is logged until you approve it. STR Loophole never requests access to your email account.

Data returned by these actions is transmitted to and processed by the applicable AI provider (OpenAI or Anthropic) as a normal part of how that AI Assistant carries out your request, and is subject to that provider's own privacy policy and terms. STR Loophole does not control how the AI provider further processes, retains, or uses that data. We recommend reviewing OpenAI's and Anthropic's privacy policies before connecting.

You can revoke this access at any time by disconnecting the STR Loophole connector in your ChatGPT or Claude settings, or by reauthorizing the connection to grant access again. Disconnecting stops any further data from being shared with that AI Assistant going forward.

Data Retention

We retain your account, logged activities, properties, and calendar-connection data for as long as your account remains active, so that the App can display your historical hours. If you request deletion of your account (see "Your Rights and Choices" below), we delete this data from our production systems within 30 days, except where we are required to retain it longer to comply with legal obligations, resolve disputes, or enforce our agreements.

OAuth authorization codes issued to AI Assistants expire and become unusable within 60 seconds of issuance. Refresh tokens are rotated on every use and remain valid until you disconnect the AI Assistant or the token is otherwise revoked. We do not control how long an AI provider itself retains data it received from STR Loophole on your behalf.

Your Rights and Choices

You have the right to:

• Revoke calendar access at any time through your device settings.
• Disconnect any connected AI Assistant (ChatGPT, Claude) at any time through that assistant's connector settings.
• Request deletion of your account and associated data.
• Contact us for any questions regarding your data privacy.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
• Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
• Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information, you may request that we limit its use to what is necessary to provide the services you requested.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us at hello@agentsinvest.com. We will respond to verifiable consumer requests within 45 days. You may also designate an authorized agent to make a request on your behalf.

Children's Privacy

STR Loophole is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of any significant changes by posting the updated policy within the App.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: