← GS511 Portal

Privacy Policy

Bergrand Realty LLC ("we," "us," or "GS511") operates a private owner portal at bergrandrentals.com (the "Service"). This policy explains what personal information the Service collects, how we use it, and the choices you have. It applies only to individuals we have personally invited into the Service — owners of the vacation property, their family members added to the same ownership slot, housekeeping staff, and the property administrator.

Information we collect

• Account information — your name, email address, mobile phone number, role (owner, housekeeper, admin), and (for owners) which ownership slot you are linked to.
• Reservation activity — the weeks you are scheduled to occupy the property, notes you add to your own weeks, cleaning selections, and checkout confirmations.
• Cleaning & payroll data (housekeepers only) — shift clock-in/out timestamps, laundry loads, and pay computed from your configured hourly rate.
• Payment information — we do not store credit-card numbers. All card payments are processed by Stripe. We retain only Stripe's payment identifiers, amounts, and paid/refunded status.
• Communication logs — records of transactional SMS and email we send you (delivery status, timestamp) and inbound SMS replies you send to our published number for opt-in/opt-out and support.
• Technical data — standard web-server logs (IP address, browser type, request path) retained for security and troubleshooting.

How we use it

Personal information is used solely to operate the Service on behalf of Bergrand Realty LLC:

• To display your reservations, your notes, your invoices, and (for housekeepers) your shifts and pay.
• To send you transactional notifications about your own reservations (arrival prompts, checkout reminders, cleaning-ready alerts, invoice notices, cleaning assignments).
• To process cleaning-fee payments via Stripe when you initiate a checkout.
• To detect and prevent abuse or errors in the Service.

We do not sell your data. We do not use it for advertising. We do not share it with any third party except the specific service providers required to operate the Service (see below).

SMS & email

Transactional SMS is delivered via Twilio. Transactional email is delivered via our SMTP provider (Ionos). The frequency of messages depends on your reservation activity — typically 2–6 SMS per month per active user, more in the week leading up to your stay.

You may reply STOP to any SMS to unsubscribe from further SMS at any time (Twilio and our system both honor this immediately). Reply START to re-subscribe. Reply HELP for help. Message and data rates may apply. Opting out of SMS does not opt you out of transactional email — contact the administrator to be removed from email as well. Opting out of transactional communications about your own reservations may prevent us from delivering the Service to you.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Service providers

• Stripe, Inc. — payment processing (subject to stripe.com/privacy).
• Twilio, Inc. — SMS delivery (subject to twilio.com/legal/privacy).
• 1&1 Ionos — email delivery.
• MongoDB Atlas / Emergent Labs hosting — application hosting and database.

Each provider is bound by a data-processing agreement and processes information only on our instructions.

Data retention

Account records and reservation history are retained for as long as you have an active account, plus a reasonable window afterwards for accounting, tax, and dispute-resolution purposes (typically up to 7 years for financial records). Communication logs are retained for 24 months. You may ask the administrator to delete your account at any time; historical financial records that we are legally required to keep will be retained in redacted form.

Your rights

Because the Service is a private, invite-only tool, you can exercise the following rights by emailing the administrator (contact below):

• Ask what personal information we have about you.
• Correct information that is out of date.
• Delete your account (subject to the retention rules above).
• Opt out of SMS or email notifications.

If you are a California, Colorado, Connecticut, Utah, or Virginia resident, you additionally have the rights granted to you under your state's privacy law (CCPA/CPRA, CPA, CTDPA, UCPA, VCDPA). Requests are responded to within 30 days.

Security

The Service is served over HTTPS. Passwords are stored using bcrypt hashing. Authentication uses short-lived signed JWTs and secure HTTP-only cookies. Access is scoped by role. Stripe handles card details end-to-end; card numbers never touch our servers.

Children

The Service is not directed to children under 13, and we do not knowingly collect information from them.

Changes to this policy

We'll post any updates on this page and update the "Last updated" date. Material changes will also be emailed to registered users.

Contact

Questions about this Privacy Policy or your data? Email rick@bergrand.com.