1. Who this covers
Camp Orbit is operated by Shelly Wren. This policy describes how we handle information in the Camp Orbit website and app (the "Service"): information about park owners and their staff who hold accounts, and guest information that parks handle through the Service.
2. Information we collect
- Account information: your name, email address, and sign-in credentials (passwords are handled by our authentication provider and are never stored by us in readable form).
- Park information: park name, address, sites, rates, and settings you configure.
- Operational records: reservations, tasks, maintenance and housekeeping records, store and rental records you create in the Service.
- Guest information: when a guest books through a park's booking page, or a park enters a reservation, we store the guest's name, email, phone number, and stay dates so the park can manage the booking.
- Payment information: subscriptions and guest payments are processed by Stripe. Card numbers go directly to Stripe; we never see or store full card numbers. We keep billing status and transaction identifiers.
- Technical information: device and browser details, basic logs, and your device's local storage, which the app uses to keep you signed in and remember workspace preferences.
3. How we use information
We use information only to run and improve the Service: providing your workspace, processing bookings for parks, billing subscriptions, customer support, security, and service messages (such as receipts and account notices). We do not sell personal information, and we do not use guest information to market to guests.
4. Guest information and parks
Each park decides what guest information it collects and how it uses it; we process that information on the park's behalf to operate its bookings. Guests with questions about their information should contact the park they booked with. We support parks in responding to those requests.
5. Service providers we rely on
We share information only with the providers needed to run the Service, under their own security and privacy terms:
- Supabase — database and account sign-in.
- Stripe — subscription billing and park guest-payment processing.
- Netlify and Cloudflare — website and app hosting and security.
We may also disclose information if required by law, or to protect the rights, safety, or property of our customers or the Service.
6. Cookies and local storage
The app uses local storage and essential cookies only — to keep you signed in and run the workspace. We do not use advertising trackers.
7. Retention and deletion
We keep account and park information while your account is active. Billing records are retained as needed for accounting and tax purposes. You may request deletion of your account and park data by contacting us; we will delete it within a reasonable period except where retention is legally required.
8. Your choices and rights
You may request access to, correction of, or deletion of your personal information at any time by emailing us. Depending on your state of residence, you may have additional rights under applicable privacy law; we honor valid requests as the law requires.
9. Security
We use encryption in transit, per-park data isolation, and access controls appropriate to a service of this kind. No system is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is a business tool and is not directed to children under 18.
11. Changes and contact
We may update this policy; material changes will be posted here with a new effective date. Questions or requests: [email protected].