Privacy Policy

LodgixOps is a hotel-operations and receipt-capture service operated by Mt. StoreMax LLC, doing business as LodgixOps (“we,” “us,” “LodgixOps”). This policy explains what information we collect when you use our web or mobile app, how we use it, and the choices you have.

We collect only what we need to operate the service for your company:

• Account information. Your email address, a cryptographically hashed copy of your password (we never store the password itself), your display name (if provided), and your role inside your company (employee / admin / owner / executive).
• Receipts and operational data. Receipt images you upload, the vendor name, amount, category, date, and any notes you enter, along with the property and company they belong to.
• Mobile device information.When you use our Android app, the app uses your device's biometric (fingerprint / face) to unlock saved credentials. Your biometric data never leaves your device— we do not collect, transmit, or store it.
• Server logs. Standard request logs (IP address, user-agent, timestamp, request path) are kept by our hosting provider for a short rolling window for security and debugging.

We use the information above only to operate LodgixOps for your company: authenticating you, storing the receipts you submit, generating the reports your company asks for, and keeping the service secure and reliable.

We do not use your information for advertising, profiling, behavioral analytics, or any purpose unrelated to running the service for your company.

• Other authorized users inside your company. Receipts and operational data are visible to other members of your company (admins, owners, executives) per the role-based access controls inside the app. Personal account fields (your hashed password) are never visible to anyone else.
• Microsoft Azure (our cloud infrastructure). LodgixOps runs on Microsoft Azure in the United States. Azure processes data on our behalf to host the application, store receipt images, and run the database. Azure is bound by its own enterprise data-processing terms.
• Nobody else. We do not sell, rent, or trade your information. We do not share it with advertisers, data brokers, analytics vendors, or marketing platforms.
• Legal requirements. We may disclose information if required by a valid legal process or to protect the rights, safety, or property of LodgixOps, our users, or others.

Receipts, account data, and server logs are stored on Microsoft Azure servers located in the United States (Central US region). Data in transit is protected by HTTPS / TLS. Data at rest is encrypted using Azure's managed encryption.

• Receipt images and data:retained for at least seven (7) years to meet U.S. business-record retention rules (IRS). After seven years, receipt images are automatically deleted by Azure's lifecycle policy.
• Account information: retained while your account is active. After deletion (see below), personal account fields are removed within thirty (30) days; receipts associated with your company are retained per the seven-year rule above and remain accessible to other authorized users in your company.
• Server logs:a short rolling window per our hosting provider's defaults.

• Request a copy of your data. Email us at support@mtstoremax.com and we'll provide an export within thirty (30) days.
• Request deletion of your account. Visit /account/delete for instructions. We respond within thirty (30) days.
• Correct your information.You can update most profile fields directly inside the app. For changes you can't make yourself, email us.

We protect your information with industry-standard practices: HTTPS / TLS for all traffic, encryption at rest, hashed passwords, role-based access controls inside the app, and minimum-necessary permissions on mobile (the Android app only requests camera and biometric access). No system is 100% secure, but we take this seriously and continuously improve our practices.

The web app uses only essential session cookies (so you stay signed in). We do not use third-party analytics, advertising cookies, tracking pixels, or fingerprinting. The Android app does not use cookies at all.

LodgixOps is a workplace tool intended for adults (18+). We do not knowingly collect information from anyone under the age of 18. If you believe a minor has provided us with information, please email us and we'll delete it.

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date at the top of this page. For significant changes we'll also notify active users in-app or by email.

Questions or requests? Email support@mtstoremax.com.