Data Privacy and Security for Rental Operations

Rental operations generate sensitive data: property photos that reveal locations, access instructions, vendor details, and financial records. Handling it carelessly is a liability; handling it well is a selling point.

The risks specific to STR ops

• Location leakage — photos carry GPS/EXIF metadata by default.
• Cross-tenant exposure — a multi-property, multi-team system must never let

one host see another's data.

• Uncontrolled file access — proof photos and receipts need access control and

an audit trail.

• Regulatory duties — GDPR/LGPD obligations for personal data.

A defense-in-depth approach

1. Tenant isolation — every record scoped to a workspace; unauthorized access

is refused.

1. Encryption at rest — files stored as ciphertext, not plaintext.
2. Signed, expiring URLs — file links can't be shared or guessed indefinitely.
3. Metadata stripping — EXIF/GPS removed from images on upload.
4. Tamper-evident audit log — every file access recorded in an append-only,

hash-chained log.

Roles and responsibilities

Under GDPR/LGPD, the host is typically the data controller and the operations platform the processor. Clear role separation and documented handling matter as much as the technical controls.

How Maravo handles this

Maravo enforces per-workspace isolation, encrypts uploads at rest, serves them via short-lived signed URLs, strips EXIF/GPS, and logs every file access in an append-only tamper-evident chain — with GDPR/LGPD framing where the host is controller and Maravo is processor.

FAQ

Who can see a property's photos? Only members of that property's workspace with appropriate roles; access is scoped and logged.