Privacy

Last updated October 11, 2026

NIVIRUN makes tags and a dashboard for vacation-rental property managers. This page says what we keep, why, and who else touches it.

The short version: we keep only what the service needs, and show it only to the people it's for. No ads, no tracking, and we never sell or rent anyone's information.

Who is who

Property managers are our customers. They set up their properties in NIVIRUN. Guests tap the tags during a stay. For guest information, the property manager decides what's collected and why, and we store and deliver it for them. Questions about a stay are best sent to your property manager first.

What we keep from property managers

  • Company name, email and phone.
  • Your password, stored only as a one-way hash that nobody can read back, and your two-step key if you turn it on.
  • What you enter about your properties: Wi-Fi details, entry details (door and lockbox codes, which are encrypted), Find items, photos, instructions and checklists.
  • Access Passes: the guest name and stay dates you type or import. From a reservation spreadsheet we keep only the name, dates and property. The rest of the file isn't stored.

What we keep from guests

  • When a tag is tapped: which tag, the time, and the browser type (for example, Safari on an iPhone). Not who you are.
  • When an Access Pass is entered: the time, whether it worked, your IP address and browser type. This stops people guessing passes, and lets the property manager see when the entry details were opened. The pass you type is never written to that log.
  • When you report a problem: what you write, the photo if you add one, and your name or phone only if you give them.
  • When Find has no answer: the words you searched, so the property manager can add the answer.

Guest pages set no cookies. A page may remember one or two small things on your own phone, like a tip you closed, and that never leaves your phone.

What we keep from visitors to nivirun.com

Only what you send us: the kit request form (name, company, email, phone, number of units, message) or the sign-up form (company name, email, phone).

We also count visits: how many people opened the homepage and the sign-up page each day. There are no cookies, and nothing is kept about you. To count a person only once a day, your IP address and browser type are turned into a scrambled code that's held in memory and thrown away at the end of the day. All we keep is the daily number.

Cookies

One kind: the sign-in cookie that keeps property managers and staff signed in. There are no advertising or analytics cookies and no tracking pixels.

Who else touches it

  • Render hosts the site and its database in the United States.
  • Cloudflare protects and speeds up the site, and stores our daily backups. Backups are encrypted before they leave our server.
  • Twilio (text messages) and our email provider, only when a property manager turns on alerts. The alert, such as a guest's report, goes to that manager's phone or email.
  • The property manager of the place you're staying sees what guests send and the Access log for their own properties. Never anyone else's.

Nobody else. We may share information if the law requires it, and only what it requires.

How it's protected

Every page is served over HTTPS. Entry details are encrypted (AES-256) and are shown only to a guest with a valid pass, during their stay. Passwords are hashed. Two-step sign-in is required before a manager can see or change entry details. Wrong passwords and wrong passes are limited. Backups are encrypted and kept off-site.

How long we keep it

For as long as the property manager's account is open. Managers can remove properties, Find items, checklists and tags from the dashboard at any time. For anything else, like a guest report, ask us and we'll delete it. Access Passes stop working when the stay ends. The log of attempts stays, so the manager can check who got in and when. Deleted information can stay in our encrypted backups for a while. Ask us and we'll remove it from those too.

Your choices

You can ask to see, correct or delete information about you. Guests: ask the property manager, or us. Property managers: ask us, and we'll also send you a copy of your data if you want one.

Children

NIVIRUN isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If this page changes, the date at the top changes too. If it's a change that matters, we'll email property managers before it takes effect.

Questions

Email manymanny55@gmail.com, or use the form on our homepage.