StayLicit — permit & violation desk for small Airbnb hosts

1. One-liner

Forward a city violation notice and get back the permit packet small Airbnb hosts must file before the cure deadline.

2. Trend signal — why now?

California SB 346 took effect January 1, 2026 — every California city can now compel Airbnb, Vrbo and the rest to hand over host name, address, nights booked and registration status, and use that match against the city permit register to mail enforcement letters. LA and SF already started. Berkeley sent 5,000+ enforcement letters and converted 86% of violators; Nashville booked $2.8M of new STR tax revenue in the first year of using the same kind of city-side tool (Granicus Host Compliance, which now serves 500+ cities). Fines run $500–$1,000/day in most cities, $2,000/day in LA, up to $10,000/day in Las Vegas. NYC charges hosts the greater of $1K–$5K or 3× revenue illegally collected.

The Granicus playbook is plain: scrape 70–100 listing sites daily, cross-reference the platform-supplied registration field, send a letter with a 10-day appeal window (LA), 14–30 day cure period most other places. Chattanooga as of Jan 2026 demands a photo of the posted certificate uploaded to the renewal portal. Phoenix from April 2026 requires a notarized owner-residence attestation for properties with ADUs. Every city’s packet looks different, but the clock is the same: short.

Meanwhile the 2.25M US Airbnb listings are ~90% individual hosts, average $15,800/yr revenue per host. Avalara MyLodgeTax charges $27/mo + $299/property setup but handles only the tax side. RentPermit.com is $19/mo but tracks expiry on 11 cities and doesn’t draft documents. AirDNA, Mashvisor and Rabbu explicitly tell hosts “we are not your compliance tool.” The single-property landlord has been priced out of the existing software, and the cities have been catching up fast.

Provenance:

• Signal 1: SB 346 effective Jan 1 2026, CA cities can pull Airbnb/Vrbo host data quarterly and match against permit register; up to $10K/day fines on platforms — https://www.avalara.com/mylodgetax/en/blog/2026/01/california-law-gives-local-governments-authority-to-require-data-from-short-term-rental-marketplaces.html — 2026-01
• Signal 2: Berkeley sent 5,000+ enforcement letters with 86% conversion; Nashville added $2.8M STR tax revenue in year 1 using Granicus Host Compliance (now in 500+ cities) — https://granicus.com/success-stories/how-a-popular-tourist-destination-collected-evidence-for-80-citations-in-3-months-with-host-compliance/ — 2026
• Signal 3: 2.25M US Airbnb listings, ~90% individual hosts at $15,800 avg revenue; existing tools (Avalara MyLodgeTax $27/mo tax-only, RentPermit $19/mo expiry-tracker 11 cities) don’t draft renewal or violation-response packets — https://www.airroi.com/blog/dc-short-term-rental-law-2026, https://www.rentpermit.com/, https://strspecialist.com/reviews/avalara-mylodgetax-tax-compliance-review — 2026 Category: Regulatory arbitrage

3. The opportunity

Cities just turned on the firehose. Hosts who slipped through for years are now on a deterministic detection path: platform-data → permit-register cross-match → letter. The host has 10–30 days to respond with the exact packet the city ordinance demands — and every city’s ordinance is different. Palm Springs wants the renewal form, $500K liability proof, and an HOA letter. Sonoma wants a certified property manager listed on file. Santa Cruz wants PLG-150 + PLG-210 + safety certification. LA wants the registration number on the listing, proof of primary residence, and a 24/7 local-contact attestation.

A small host with 1–3 properties can’t memorize ordinances across 200+ jurisdictions. They also can’t afford a $400/hr lawyer for a $1,000/day fine. Hostaway and Lodgify won’t sell to them — they target 10+ property managers at $100+/mo. RentPermit is a calendar. Avalara handles only tax. The gap is the packet — the AI-drafted, jurisdiction-correct bundle of forms, attestations, COI cover-letters and violation responses delivered against the cure clock.

The wedge isn’t tracking expiry. It’s the panicked moment a host pulls a notice out of the mailbox. That moment is now manufactured by Granicus at scale across 500 cities.

4. Target market

• Primary customer: US individual landlord with 1–3 short-term rental properties, in an actively-enforcing city. Annual gross rental revenue per property $15K–$50K. They self-list on Airbnb/Vrbo, use a Google Calendar and a Dropbox folder, no PMS. Typical age 45–65, financial profile “income property + day job.”
• Why they buy: A violation letter just arrived in the mail with a 10–30 day cure window and a $500–$2,000/day fine clock. OR a renewal letter showed up requiring documents the host doesn’t have ready. OR they got a tax-collector inquiry for unfiled TOT. Each event is hair-on-fire and the host has no idea what the city actually wants.
• Rough TAM reasoning: ~2.25M US Airbnb listings, ~90% are individual hosts, ~1.5M sit in cities with permit regimes already in place. If 20% face a renewal or enforcement event in any given year, that’s ~300K acute moments per year. At $99/event or $19/mo subscription, the addressable market is plenty for a $1–5M ARR product.
• Why now for them: Pre-2026 the city had no easy way to find them. After SB 346 and the broader Granicus rollout, every active listing is one database join away from a notice in the mail.

5. Product sketch (MVP)

• Tell-us-your-city wizard — host enters property address + STR platform; product looks up the right ordinance pack (initial permit, renewal, TOT, neighbor-notification, insurance minimums).
• Renewal packet builder — pre-fills the city’s actual application/renewal form, drafts the affidavits and attestations, generates the COI request letter to send to the insurance broker (naming the city as cert holder where needed).
• “Forward the letter” violation desk — host emails or photographs a notice; product reads it, extracts the cited code section + cure deadline, drafts the response packet and a cover letter, gives the host a checklist of what to mail or upload.
• Cure-clock countdown — visible deadline timer with email/SMS reminders and a one-tap “I sent it” log.
• TOT calculator + filer — for jurisdictions where Airbnb doesn’t auto-remit (about 40% of US local jurisdictions), pull bookings from Airbnb/Vrbo iCal + payout export and produce the monthly/quarterly filing draft.
• Posted-certificate photo capture — phone-camera flow that timestamps + geotags the posted permit photo for cities like Chattanooga that demand it on renewal.
• Ordinance change watcher — when the host’s city changes its STR ordinance, the relevant packet templates auto-update.

6. AI angle — what’s load-bearing

This product cannot exist without a language model. The load-bearing work:

1. Ordinance ingestion — parse 200+ city STR ordinances (each 5–30 pages of municipal code) into a structured packet definition: which forms, which attestations, which insurance language, what cure period. Re-parse when the city amends.
2. Letter triage — extract from a city notice the exact code section, allegation, cure period, deadline, and required remedy. Off-the-shelf OCR + LLM.
3. Packet drafting — pull the host’s property data + the city’s template and produce a filing-ready PDF bundle. Tone has to read like a careful homeowner, not a lawyer.
4. TOT computation — reconcile Airbnb payout reports against city-specific tax base rules (some include cleaning fees, some don’t; some have a 30-night exemption, etc.).

Remove the AI and you’re back to lawyer-billable hours at $400. That’s exactly the bracket today’s small host can’t afford.

7. Localization angle (if any)

US-first because that’s where the enforcement wave just landed. The same template extends to UK (selective-licensing in London, Edinburgh control area) and Canada (Toronto, Vancouver) once US wedge is proven — but those are v2. Stay US for v1; SB 346 is the launch beachhead, then Florida (Plantation, Sarasota), Texas (San Antonio, Austin) and Tennessee (Chattanooga, Nashville) where enforcement is also intensifying.

8. Business model — path to $1M–$5M ARR

• Pricing: Two SKUs.
  • Violation-response one-shot — $149 flat fee, includes drafted response packet + cure-deadline tracker.
  • Annual permit subscription — $19/mo per property (cheaper than RentPermit when bundled with quarterly TOT and violation credits). Includes one violation-response credit per year.
• ACV: $228/yr per property for the subscription. Average host runs 1.4 properties, so ~$319 ACV.
• Rough math to $1M ARR: 3,200 hosts × $319 = $1.0M. That’s 0.2% of US individual STR hosts in regulated cities.
• Rough math to $5M ARR: ~16K hosts (1% of regulated-city individual hosts). Requires expanding to 100+ cities and adding the property-manager-of-record marketplace (referral to Sonoma-style certified PMs).
• Expansion path: Per-property pricing scales linearly with portfolio growth. Add TOT filing as a usage-based fee ($5/filing). Sell white-label to STRA chapters and local Airbnb-host Facebook groups (40% margin share).

9. Go-to-market wedge — first 100 customers

Concrete, hair-on-fire targeting:

• Direct mailbox + DM to flagged hosts in 3 cities. Pull the public Granicus-style scrape (or just buy AirDNA’s listing exports for Palm Springs, LA, and Chattanooga). Cross-reference against publicly listed permit registries. Anyone listed but not permitted gets a DM via Airbnb’s host messaging + a postcard. Expected ~15K targets in 3 cities; 1% reply = 150 leads.
• Reddit and the 5 biggest Airbnb-host Facebook groups. r/airbnb_hosts (250K), r/AirBnB (1.4M), “Vacation Rentals by Owners” group (50K+), Lodgify’s “Vacation Rental World Summit” group. Post a free “What does my city actually require?” tool that returns the packet list — collect emails.
• Local STR Alliance partnerships. Rent Responsibly and Airbnb’s local “Home Sharing Clubs” are organized lobbying groups in 100+ cities. Sponsor their newsletter or run free office-hours sessions — they have the panicked-host distribution baked in.
• City-by-city launch SEO. “Palm Springs vacation rental renewal 2026” is the long-tail keyword. Write the canonical answer page per city; convert to free-tool funnel.
• Insurance broker referral loop. Hosts need a COI naming the city — STR-specialty brokers (Proper, Steadily, Safely) already get the panicked call. Offer a 20% revshare for referrals; the broker’s customer is exactly ours.

10. Build complexity — justification

Medium. The hard part isn’t engineering — it’s the ordinance taxonomy. You’re effectively building a structured database of 50–150 city STR ordinances, kept current, plus a template library per jurisdiction. That’s 6–10 weeks of focused operations work plus 4–6 weeks of LLM-pipeline glue (notice parsing, packet generation, calendar sync, TOT computation). Off-the-shelf: GPT-class LLM, DocuSign / e-sign embed, Stripe, Airbnb iCal, a Postgres + queue. Net: 1 builder + 1 operations/legal-ops lead can ship in ~12–14 weeks for ~20 cities.

11. Gating checklist

Gate	Pass?	Note
Legal in target market	✅	Drafting filings = not unauthorized practice if disclaimed as “self-help” — same model as LegalZoom for ~25 years.
Ethical — no harm / dark patterns	✅	Helping hosts comply with the rules; no harm to neighbors or cities.
Market exists (evidence above)	✅	5K Berkeley letters, $2.8M Nashville recovery, SB 346 lit Jan 2026.
1–5 person team can build this	✅	Solo or pair; ordinance research is the bottleneck.
Launchable with <$50K / ₹40L	✅	$5–10K for ordinance ingestion sprint, $10K for early ads + content.

All five pass.

12. Feasibility score

Axis	Weight	Score	Notes
Problem intensity	20	17/20	Hair-on-fire moments: $500–$2,000/day fine, 10–30 day clock. Hosts are panicked, not just annoyed.
Demand evidence	15	12/15	Granicus city-side traction proves the matching enforcement exists; RentPermit and Avalara prove host willingness to pay. Direct host-side denial-appeal market is inferred not measured.
Build feasibility	15	11/15	Ordinance corpus is hand-curated work; LLM does the easy parts. Probably 12–14 weeks to credible 20-city v1.
Distribution clarity	15	10/15	Named lists (Granicus scrapes, AirDNA exports), named groups (Rent Responsibly, host FB groups), but cold-mail conversion on landlords is mid.
Revenue mechanics	15	10/15	$19/mo + $149 events. ACV ~$319. Math to $1M is plain. $5M needs city-count expansion plus PM marketplace.
Time to first revenue	10	7/10	First $149 violation-response within 30 days of launch is realistic. Subscription ramp takes 60–90 days.
Defensibility	10	6/10	Soft moat: ordinance corpus + brand in host community. Granicus owns the city-side; if they pivot to host-side, that’s the main threat.
Total	100	73/100	Plus +3 modifier for the SB 346 timing window — call it 76.

13. Qualitative modifiers

Founder-fit tags

operations-heavy (ordinance ingestion is grindwork, not glamorous), content-heavy (city-by-city SEO is the cheap channel).

Key assumptions to validate (3–5)

1. Assumption: A host who just got a city violation letter will pay $149 for an AI-generated response packet. How to test: Buy 50 Airbnb host emails for properties listed in LA/Berkeley without a registered permit ID; send a personal email offering a $0 first-letter-response in exchange for a 20-minute interview. Goal: 5+ panicked hosts willing to pay $149 if the product had existed.
2. Assumption: The ordinance corpus for 20 cities can be built in 6–10 weeks by one operator with LLM help. How to test: Time-box one week to fully structure the Palm Springs, LA and Chattanooga ordinance trees. If it takes >5 days to do 3 cities, the 20-city target is unrealistic and the city-coverage v1 has to shrink.
3. Assumption: Hosts with 1–3 listings will pay $19/mo for subscription even after they’ve handled the immediate violation. How to test: Track 30-day post-resolution churn signal in the violation-response cohort. <40% conversion to subscription kills the LTV model.
4. Assumption: Granicus and city portals won’t shut out automated submission. Most filings are PDF upload or mail today — automation-friendly. How to test: Manually submit 5 renewal packets across 5 cities; document any “no third-party submission” rule.
5. Assumption: Local STR alliances and host FB groups will distribute (paid or affiliate). They have a clear interest in hosts surviving enforcement. How to test: Cold-pitch Rent Responsibly + 3 city Home-Sharing Clubs for a co-branded webinar or affiliate deal. 1 signed partner in 4 weeks = green light.

Risk flags

1. Granicus pivot risk: Granicus serves cities today, but Airbnb’s Rocket Lawyer partnership and Avalara’s host-side ambitions show the host side is contested. If Granicus offers a free host-side compliance tool, the wedge shrinks fast.
2. Platform-data risk: If Airbnb starts pushing hosts into a one-click city-registration flow that auto-files, our packet wedge weakens. NYC’s Local Law 18 is already such a flow.
3. City ordinance churn: Templates need active maintenance. A single city ordinance change can break dozens of host filings. Ops cost scales linearly with cities served.
4. Legal exposure: Drafting filings for hosts skirts the line of unauthorized practice in some states. Need a clear self-help framing + EA/attorney review for the riskier appeal letters.

14. Structured verdict

Score:                  76/100
Verdict:                GO
Confidence:             Medium
Best-fit builder:       Operations-heavy solo or pair; one builder + one ordinance-grinder. Ideal if one founder owns a 2–3-property STR portfolio in a regulated city.
Time to revenue:        4–8 weeks (first $149 violation-response)
Capital to launch:      $15–25K (₹12–20L) for ordinance ingestion, content, and seed ad spend
Top 3 assumptions to validate first:
  1. Panicked-host willingness to pay $149 for response packet — 50 cold outreaches to flagged hosts in LA/Berkeley
  2. Ordinance corpus build velocity — 1-week time-box on 3 cities, decides 20-city scope
  3. Subscription conversion from one-shot — track 30-day re-engagement in pilot cohort
Kill criteria:
  - Abandon if <2 of 50 cold outreaches convert to paid within 30 days
  - Abandon if Airbnb launches built-in city-registration auto-filer in top 5 enforcing cities
  - Abandon if ordinance corpus cost exceeds $1K per city per year to maintain

15. Next step — 1-week validation sprint

• Day 1–2: Pull the Granicus + AirDNA public lists for LA, Berkeley, Palm Springs. Cross-reference against each city’s permit register (public records). Build a list of 100 unpermitted-but-listed properties.
• Day 3: Reach out by Airbnb DM + postcard to 100 hosts. Offer a free “what does your city actually want from you” PDF in exchange for a 15-minute call.
• Day 4–5: Run the calls. Ask: “If we’d had this when your last violation letter came, would you have paid $149? $99? $49?” Watch for “yes — and I’d buy it now” energy.
• Day 6: Build the Palm Springs ordinance tree by hand + GPT. Generate one real renewal packet end-to-end. Send to 2 friendly hosts for sanity.
• Day 7: Decide. Go if: ≥5 hosts commit to paying $99+ for a real packet, and the one-city ordinance build was ≤2 days of focused work. Kill if: zero willing-to-pay or the Palm Springs build alone took >4 days.