Skip to content
Hotel management, Data protection & access

Protection for guest and hotel data.

Central sign-in, hotel-specific access and role permissions protect work in STRYK. Public web access uses HTTPS. The supported offline data store is encrypted.

Data protection & access

Everyone signs in personally

Central sign-in, hotel-specific access and role permissions protect work in STRYK. Public web access uses HTTPS. The supported offline data store is encrypted.

Data protection & access

Data protection & access

01

Everyone signs in personally

02

A second factor protects sign-in

03

Sensitive actions require a fresh sign-in

04

The hotel cannot lock itself out

05

Other hotels’ data stays invisible

06

Anonymise guest records on request

How it works in your hotel

  1. 01Sign-in via Nextpulse ID with second factor
  2. 02Everyone sets their own login details with Nextpulse ID
  3. 03Standard roles and custom roles with a permissions matrix
  4. 04View, edit and manage separated per area
  5. 05Owner account can neither be deactivated nor downgraded
  6. 06Roles with active users stay protected
  7. 07Switch off guest photos centrally or delete them selectively
  8. 08Role and user changes in the activity log

Four practical jobs in daily hotel operations.

01

Weekend temp

The student at reception sees bookings and guests, but no revenue and no user management.

02

Popping into the breakfast room

Reception is unstaffed for a few minutes. The workstation lock protects the screen until the colleague is back.

03

Guest requests erasure

A guest wants their data deleted. STRYK anonymises the profile; bookings and invoices are kept for record retention.

04

Moving to accounts

A colleague takes over the back office. You assign her a role with finance permissions, and the change appears in the activity log.

Common questions: Data protection & access

How does STRYK protect hotel operations?+

Every employee works with a personal account and exactly the permissions that match their job. Two-factor sign-in, separated property data and traceable history protect guests, finance and teamwork every day.

Does each property’s data remain separated?+

Yes. Bookings, guests, rooms, finance and settings remain assigned to the signed-in property. Data from other properties appears in neither lists nor detail views.

Why does every employee need a personal account?+

Only a personal account links a change clearly to the responsible person. Shared reception passwords make access removal, handovers and traceability harder and should therefore not become the operating model.

Which standard roles are available?+

STRYK provides clear starting roles for owner, administration, team and housekeeping. They reflect typical responsibilities in small and medium properties; actual access remains reviewable in the visible permission matrix.

Can the property create custom roles?+

Yes. A custom role receives a name, description and exactly the required module permissions. A night manager can therefore edit bookings and read reports without automatically managing payment methods or users.

How detailed are permissions?+

The matrix separates bookings, rooms, availability, housekeeping, guests, messages, finance, pricing, Booking Engine, channels, reports, settings, users, roles, POS and registration, among others. Each area distinguishes reading, editing and management where the workflow requires it.

Does STRYK prevent contradictory permissions?+

Dependent permissions are handled together: anyone who manages an area needs the required reading and editing foundation. When permission is removed, STRYK removes dependent grants under control rather than leaving an unusable partial role.

Which details does a new user require?+

Name, a unique email address and an active role. The hotel does not issue a starting password: the person receives an email and sets their own login details with Nextpulse ID. An email address can belong to only one STRYK user account.

Which password rule applies?+

Passwords are not set and checked in STRYK, but with Nextpulse ID; the password rules apply there. STRYK does not issue or store passwords for staff.

How is a departing employee’s access ended?+

Management disables that individual account. The former employee can no longer sign in, while previous tasks and changes remain assigned to the right person.

Can a user accidentally deactivate themselves?+

No. STRYK blocks self-deactivation in team management. An administrator therefore cannot end their own ability to work in the middle of role maintenance.

Can the last owner be removed or downgraded?+

No. Before an owner is deactivated or assigned another role, STRYK requires another active owner. This protects the property from locking itself out of full administration.

Can the owner role be deactivated?+

The central owner role remains active and retains full responsibility. A user also cannot remove from themselves the role permissions needed for continued user and role administration.

Can a role be changed later?+

Yes. An authorised administrator assigns the employee another active role. The change is attributed to the user and responsible operator and applies to subsequent protected actions.

What happens to a role that still has active users?+

STRYK prevents uncontrolled deactivation. Affected employees must first be assigned a suitable active role or deliberately deactivated.

How is two-factor sign-in set up?+

Each person sets up their second factor in their Nextpulse ID account, for example with an authenticator app. STRYK accepts the verified sign-in from there.

What happens at login when two-factor sign-in is enabled?+

Sign-in runs via Nextpulse ID: email, password and second factor are confirmed there, and only then does STRYK open access to the hotel. For sensitive actions, STRYK requires a fresh sign-in with the second factor.

How is two-factor sign-in disabled again?+

This is done in the Nextpulse ID account, not in STRYK. If someone has lost their second factor, STRYK support can reset it after verification.

What happens when a sign-in expires?+

STRYK visibly ends access and asks for a new sign-in. A disabled employee cannot regain access, while active users sign in securely again.

How does “forgot password” work?+

Passwords are reset with Nextpulse ID, not in STRYK. STRYK itself does not manage passwords for staff.

Which security changes remain in the activity log?+

Sign-ins and the creation and modification of users and roles are logged with hotel, user and action. This makes it possible to clarify later who changed an access right. Password and second factor are managed with Nextpulse ID.

How does STRYK support guest-data privacy?+

Guest photos can be centrally disabled or deliberately removed. When a guest record is deleted, STRYK anonymises personal data if existing booking references must remain; without such references the record can be removed completely. The action is logged.

Do roles, two-factor sign-in or privacy cost extra?+

No. Users and roles, sign-in with a second factor and the data protection features are part of the STRYK price, with no set-up fee and no surcharge. In your demo access you review the role matrix and personal accounts yourself.

Could Data protection & access work for your hotel?

14 days free. All STRYK core apps included. No setup fee; optional AI modules are separate.

Questions about STRYK?