Receipts are read on our own server
Receipts and documents are read on our server in London by default. No outside service sees them unless your business chooses one in Settings.
Trust centre · data processing
The suppliers that handle your data.
Every company that processes customer data for Short Stay Control: what it does, what it receives, where, and the legal safeguard. Last updated 3 October 2026.
Services you choose to connect
Hostaway, Uplisting, Microsoft 365, property data services, and any AI or receipt-reading service you add your own key for, are connected only when your business chooses. They work under your own agreement with that company, so they are not our suppliers. We send each one only what the connection needs.
Changes to this list
We email the billing contact of every workspace at least 30 days before a new supplier starts handling customer data. If you object, tell us at privacy@shortstaycontrol.com. If we cannot resolve the objection, you can cancel before the change takes effect and we refund any fees already paid for the period after it.
Our data processing agreement
How we handle the property, booking and guest information your business brings in is set out in our Data Processing Agreement at shortstaycontrol.com/data-processing-agreement/. It forms part of our Terms and Conditions.
| Supplier | What it does | Data it receives | Where | Safeguard |
|---|---|---|---|---|
| OVHcloud | Hosts the application, database, documents and backups | All account and workspace data | United Kingdom (London) | Data stays in the UK |
| Stripe Payments UK Ltd | Takes subscription payments | Billing contact, business name, payment history, and card details entered on Stripe's own page | United Kingdom, with processing in the United States | Stripe data processing agreement with UK transfer safeguards |
| Resend (Plus Five Five, Inc.) | Sends account and billing emails | Recipient name and email address, and the email content | United States | Resend data processing agreement with the UK standard contractual clauses |
| Cloudflare, Inc. | Checks that sign-ups are made by a person, not a script | Browser and device signals and the IP address of the sign-up page visit | United States | Cloudflare data processing agreement with the UK Addendum |
| OpenRouter, using Anthropic's Claude | Runs the AI assistant when you use it | The question asked and the workspace figures needed to answer it. Property names are replaced with labels by default | United States | OpenRouter data processing agreement with the UK Addendum, with zero data retention |
| HubSpot, Inc. (from 16 November 2026) | Holds support requests and replies so our team can answer them | Your name, email address, workspace name, the request topic and text, its status and replies | United States | HubSpot data processing agreement with the UK Extension to the EU-US Data Privacy Framework and the UK Addendum to the standard contractual clauses |
| Anthropic, PBC (from 16 November 2026) | Runs the help assistant on the Get help page | Your question and the parts of our help guides used to answer it | United States | Anthropic's data processing addendum with standard contractual clauses; messages are not used to train models |