Privacy Policy

Last updated: 10/24/2026

1. Information we collect

We collect account details (name, email, hotel name), operational data you enter (rooms, bookings, guests), and standard usage telemetry to improve the product.

2. How we use it

Your data is used solely to deliver Stellar HMRI services: powering your dashboards, forecasts, billing, and integrations you explicitly enable.

3. Sharing

We never sell your data. We share it only with sub-processors required to run the service (hosting, payments) under strict data-processing agreements.

4. Your rights

You can export, correct, or delete your tenant data at any time from Settings, or by contacting sales@stellarhmri.com.

5. Kenya Data Protection Act 2019

Where a property uses Stellar HMRI to handle guest data, the property is the data controller and Stellar HMRI is its data processor: we process guest data only on the property's instructions, to run the service. Each property is responsible for registering with the Office of the Data Protection Commissioner (ODPC) where the Act requires it, and for the notice it gives its guests.

What the product does to support those obligations:

• Guests booking online must agree to the property's use of their details before a booking is created, and the consent is stored with the time it was given.
• Identity documents recorded for the guest register (as the Hotels and Restaurants Act requires) are visible only to front-desk and management roles, and are masked in lists.
• A guest can ask the property for a copy of their data (right of access) or for it to be erased. Staff can export a guest's record as a file, or erase the personal details while keeping the invoices that tax law requires the property to retain.
• Identity numbers and dates of birth are deleted automatically once the guest's last stay is older than the retention period set by the property, which defaults to 24 months.
• Marketing messages are only sent to guests who opted in, and that choice is recorded separately from the consent to process a booking.
• Payment details are not stored: M-Pesa payments are approved by the guest on their own phone through Safaricom, and only the transaction code and amount are returned to us.

A data subject who is not satisfied with how a property has handled their request may complain to the ODPC. If you believe Stellar HMRI itself has mishandled data, email sales@stellarhmri.com and we will respond to the property that controls the data.

6. Contact

Questions? Email sales@stellarhmri.com.