Privacy Policy
Effective date: April 23, 2026 · Version 2.1
StorScale LLC ("StorScale", "we", "us", or "our") operates the storscale.ai website and platform. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have. It applies to visitors to our website, users of our platform, and operators whose facilities are analyzed by our platform.
Questions: hello@storscale.ai.
1. Who we are
StorScale is a revenue intelligence and market analytics platform for self-storage operators. We connect to your Property Management System (PMS), public market data, and third-party data providers to generate pricing recommendations, competitor intelligence, and marketing analytics.
Controller of your personal data for this policy: StorScale LLC. For a mailing address, contact hello@storscale.ai.
2. Information we collect
2.1 Information you provide directly
- Account details — name, email, phone, job title, company name, facility address(es)
- Account credentials and authentication tokens you issue to our application
- Billing information — handled by Stripe; we receive a token and last-4 of card, never the full card number
- Communications you send us — email, support tickets, survey responses, call recordings where consented
- Content you upload — documents, photos, spreadsheets, facility operating records, PMS exports
2.2 Information collected automatically
- Usage — pages visited, features used, time on page, click events
- Device and browser — IP address, browser type, OS, device ID, screen size
- Cookies, local storage, pixels — see Section 6
- Marketing attribution — UTM parameters, referrer, landing page, campaign ID
- Session analytics — aggregated event data via PostHog; error traces via Sentry
2.3 Information from connected integrations
When you connect a third-party service to StorScale, we access data on your behalf and in accordance with the permissions you grant. Typical sources:
- Property Management Systems (Storable/SiteLink, Tenant Inc, Yardi Breeze, storEDGE, Easy Storage Solutions) — occupancy, move-ins/outs, unit mix, rental history, revenue. We read in read-only mode unless you explicitly authorize write-back (rate updates on Command tier).
- Google Analytics (GA4) — site traffic, conversions, user behavior on your facility website
- Google Business Profile — reviews, ratings, local search impressions
- Google Ads & Search Console — ad spend, campaign performance, keyword rankings, CTR
- Google Tag Manager — tag deployment on your facility website
- Microsoft Clarity — heatmaps and anonymized session recordings on your facility website
- Stripe — subscription and billing data for your StorScale account
- Meta (Facebook/Instagram) Ads — optional, advertising performance data
2.4 Information from third-party data providers
We purchase or license market data to power benchmarking and recommendations. Sources include StorTrack (competitor rate intelligence), DataForSEO (keyword and SERP data), BrightLocal (local citations), and public sources such as Google Maps, county assessor records, and company websites.
3. How we use information
- Operate, maintain, and improve the StorScale platform
- Generate facility audits, benchmarks, pricing recommendations, and marketing insights
- Produce invoices, process payments, and prevent fraud
- Respond to support requests and communicate product updates
- Send marketing emails where you have consented — you can unsubscribe at any time via the link in any marketing email
- Detect, investigate, and prevent security incidents, abuse, and violations of our Acceptable Use Policy
- Comply with legal obligations, court orders, and subpoenas
4. Automated processing and AI subprocessors
StorScale uses automated systems — including third-party AI models — to generate pricing recommendations, marketing analysis, competitor summaries, and written content. We disclose the AI services that may process your data below.
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Anthropic (Claude) | Automated analysis, recommendation generation, text drafting | Facility data, competitor rate snapshots, market data, narrative prompts (no raw tenant PII sent) | United States |
| OpenAI | Embeddings and specialized text tasks (where Anthropic is unavailable) | Same as above | United States |
| Supabase | Database, auth, row-level security, file storage | Account, facility, and usage data | United States |
| Vercel | Web hosting and edge delivery | Web traffic, request logs | United States / global edge |
| Render | Agent API and worker hosting | Account and facility data in processing | United States |
| Stripe | Billing, subscription management, payment processing | Billing contact, card token, invoices | United States |
| Resend / Postmark | Transactional and marketing email delivery | Email address, message content | United States |
| PostHog | Product analytics, feature usage | Pseudonymized event data | United States |
| Sentry | Error monitoring and exception tracking | Error context, stack traces, user ID | United States |
Anthropic (Claude API) — specific terms. Data sent to the Claude API is transmitted over TLS. Under Anthropic's Commercial Terms of Service, inputs and outputs are not used to train Anthropic's models and are not retained beyond the period necessary to service the request. See Anthropic's Privacy Policy for their handling details.
Outputs from automated systems — including pricing recommendations and competitor summaries — are informational, decision-support content intended for review by a qualified operator before any action is taken. StorScale does not execute AI recommendations automatically without your explicit approval. See our Terms of Use for the full disclaimer on automated recommendations.
We do not sell your personal information, and we do not use customer personal information to train third-party AI models.
5. How we share information
We share personal information in limited circumstances:
- Subprocessors listed in Section 4 — under written contracts that restrict their use of your data to providing services to us
- Your own connected accounts — when you authorize write-back to your PMS, Google Ads, or Google Business Profile
- Business partners — only with your explicit consent (e.g., referred integrations, co-marketing)
- Legal authorities — when required by law, court order, or to defend StorScale's legal rights
- Acquirer — if StorScale is acquired, merged, or its assets sold, data may transfer subject to this policy
We do not sell your personal information and we do not share personal information for cross-context behavioral advertising.
6. Cookies and tracking technologies
We use cookies and similar technologies for:
- Strictly necessary — authentication, session management, security
- Analytics — aggregated usage patterns (PostHog, Google Analytics)
- Marketing attribution — UTM tracking and referrer storage
You can disable non-essential cookies in your browser settings. On our website, you can manage consent preferences via the cookie banner where shown. Disabling strictly-necessary cookies will prevent the platform from functioning.
7. Your California privacy rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA:
- Right to know — request the categories and specific pieces of personal information we've collected about you, the sources, the business purpose, and the third parties we share it with
- Right to correct — request correction of inaccurate personal information
- Right to delete — request deletion of your personal information, subject to legal exceptions
- Right to limit use of sensitive personal information — we do not use sensitive personal information for any purpose other than providing the service
- Right to opt out of "sale" or "sharing" — we do not sell or share personal information for cross-context behavioral advertising, so this is always off for your data
- Right to non-discrimination — we will not deny service, charge different prices, or provide a lower quality of service for exercising any right
- Shine-the-Light — California residents may request details about third parties with whom we've shared personal information for their direct marketing in the prior year
Categories of personal information we collect (CCPA classification): identifiers (name, email, IP); commercial information (subscription history); internet or network activity (usage data, cookies); professional or employment-related information (job title, company); inferences (usage patterns). We do not knowingly collect biometric data, precise geolocation, racial or ethnic origin, religious or political beliefs, genetic data, or information concerning sex life or sexual orientation.
To exercise your rights, email hello@storscale.ai from the email address associated with your account, or submit a verified request through your account settings. We respond within 45 days and will verify your identity before acting.
You may designate an authorized agent to submit a request on your behalf with a notarized power of attorney or equivalent documentation.
8. Other U.S. state rights
If you reside in Virginia, Colorado, Connecticut, Utah, Texas, or another U.S. state with a comprehensive privacy law, you have similar rights to access, correct, delete, and opt out of targeted advertising and profiling that produces legal or similarly significant effects. We honor these rights through the same process described in Section 7. We do not engage in profiling that produces legal or similarly significant effects based solely on automated processing.
9. International users
StorScale's platform and infrastructure are based in the United States. If you access the platform from outside the U.S., you consent to the transfer of your information to the United States. We do not actively market StorScale to consumers in the European Economic Area, the United Kingdom, or Switzerland at this time. Customers with EU or UK data subjects may request our Data Processing Agreement and Standard Contractual Clauses at hello@storscale.ai.
10. Data retention
We retain personal information for as long as your account is active, as needed to provide the service, or as required by law. Typical retention windows:
- Account and facility data — duration of subscription plus 30 days (for export) plus 90 days (for backups to roll over)
- Billing and tax records — 7 years
- Support tickets and customer communications — 3 years
- Aggregated, de-identified analytics — retained indefinitely
- Marketing contact data — until you unsubscribe or request deletion
Upon account deletion, we delete your personal data within 60 days except where retention is legally required.
11. Security
We maintain administrative, technical, and physical safeguards to protect personal information. Practices include: TLS encryption in transit; AES-256 encryption at rest; row-level security and least-privilege access; multi-factor authentication on privileged accounts; vendor security reviews; logging and anomaly detection; encrypted backup; and incident response procedures. No system is 100% secure. If we become aware of a breach that materially affects your data, we will notify you consistent with applicable law.
12. Children
StorScale is a commercial tool for self-storage operators and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact hello@storscale.ai and we will delete it.
13. Changes to this policy
We may update this Privacy Policy. Material changes will be announced by email to account owners and posted at the top of this page with a new effective date. Continued use of the platform after the effective date constitutes acceptance.
14. Contact
StorScale LLC
Email: hello@storscale.ai
Web: storscale.ai
For California Shine-the-Light requests, send "CA Shine-the-Light Request" in the subject line.