Privacy Policy

This policy explains what Adventroop (“we”, “us”) collects when you use our website and services, why we collect it, who we share it with, and the choices you have. Short version: we collect what it takes to run a booking marketplace with group chat — and we do not sell your personal information.

1. What we collect

• Account & profile — email address, name, and anything you add to your profile (photo, bio, location, languages, interests). Signing in with Google shares your Google account email and name with us.
• Bookings — the activities and sessions you book, guest counts, payment status, and the participant details collected at booking: a phone number for day-of coordination, an emergency contact, any note you add, and your acceptance of the liability waiver (with a timestamp).
• Payments — handled by Stripe. We never see or store your card number; we keep a payment reference so we can confirm and refund bookings.
• Messages — what you write in Campfires, group chats and direct messages, so we can deliver it to the people you sent it to.
• Usage events — first-party analytics (pages viewed, bookings started, invites shared) stored in our own database under a random identifier, used to understand and improve the product.

2. How we use it

• To run the Service: process bookings and refunds, deliver messages, and show hosts who is on their roster (including your phone and emergency contact, so they can reach you on the day and act in an emergency).
• To send transactional email — booking confirmations, cancellations, replies and application updates. You can tune notification categories in your profile settings.
• To keep the community safe: reviewing reports, enforcing our Terms, preventing fraud and abuse.
• To improve the product, using aggregated, first-party analytics.

3. Who we share it with

• Hosts and other participants — hosts see their session roster (name, party size, payment status, contact and emergency details); people in your Campfire see your profile and messages, subject to your message-privacy setting.
• Service providers — Supabase (database, authentication, storage), Stripe (payments and host payouts), Resend (email delivery), Vercel (hosting), and — only if enabled — PostHog (product analytics). Each processes data on our behalf.
• Legal — if required by law, or to protect the safety of users or the public.
• We do not sell your personal information, and we do not share it with advertisers.

4. Retention

We keep your data while your account is active. Booking and payment records are kept as long as needed for accounting, dispute and legal purposes. If you delete your account, we delete or anonymize personal data that we are not legally required to keep.

5. Your California privacy rights (CCPA)

• Right to know — ask us what personal information we hold about you.
• Right to delete — ask us to delete your personal information.
• Right to correct — most profile data you can edit yourself in settings.
• Right to non-discrimination — exercising these rights never affects your service.
• We do not sell or “share” (for cross-context advertising) personal information, so there is nothing to opt out of.

To exercise any of these rights, email admin@adventroop.com from your account email — we respond within the timeframes the CCPA requires.

6. Cookies

We use a small number of cookies and browser-storage keys, almost all strictly necessary (sign-in sessions). Details live in the Cookie Policy.

7. Security

Data is encrypted in transit; access to production data is limited and controlled. Payments never touch our servers. No system is perfectly secure — if a breach affects your data, we will notify you as the law requires.

8. Children

The Service is for adults 18 and over. We do not knowingly collect data from children.

9. Changes & contact

We will announce material changes to this policy on the site. Questions: admin@adventroop.com.