Privacy Policy

What we collect

We collect three categories of information.

• Information you give us directly. Your name, email, phone, park name, and any message you send when you fill out a contact form, register for an account, or request a scan from one of our free tools.
• Information from your use of the software. If you operate a park on our platform, that includes your reservation data, guest list, payment events (via Stripe), site configuration, and the content you publish on your park's website.
• Information collected automatically. IP address, browser type, referring URL, the pages you view, and the time of access. We use standard server logs and analytics for this.

How we use it

To run the service. To respond when you contact us. To send transactional email related to your account or your scans. To improve the product. To detect and block spam and abuse. We do not sell your information to advertisers or data brokers.

Cookies and similar technologies

We use first-party cookies for two purposes: keeping you signed in while you use the operator app, and rate-limiting the free tools (one scan per browser per seven days). We do not use third-party advertising cookies. The accessibility widget stores your visual preferences in your browser's localStorage; that data never leaves your browser.

Third-party services we use

• Stripe for payment processing on the booking software and on park subscriptions.
• SendGrid for transactional email delivery.
• Cloudflare for DNS, CDN, and bot protection.
• Google PageSpeed Insights API for the free SEO and ADA scanners.
• Anthropic Claude for the AI Concierge add-on (only if you've activated it).

Each of those services has its own privacy policy and we encourage you to review them if you have concerns about how a specific provider handles your data.

How long we keep it

Contact form and scanner submissions are retained for two years for support and follow-up. Account data is retained for the life of your account plus 90 days after closure (in case you change your mind). You can request deletion sooner; see "Your rights" below.

How we secure it

HTTPS site-wide with HSTS enforced. Database access restricted to the application server. Passwords hashed with industry-standard algorithms, never stored in plain text. Stripe handles all card data and we never see or store payment details. Security headers (X-Frame-Options, Referrer-Policy, X-Content-Type-Options) deployed on every response.

Your rights

You can ask us to:

• Show you what data we have about you.
• Correct anything that's wrong.
• Delete your account and associated data.
• Export your reservations, guests, and content as CSV.
• Opt out of non-transactional email (we currently don't send marketing email, but if that ever changes, the opt-out will be in every message).

Email [email protected] for any of those. We aim to respond within one business day.

Children

The service is not directed at people under 13 and we do not knowingly collect information from them. If you believe we have, please contact us and we'll delete it.

Changes to this policy

If we materially change how we collect or use information, we'll post the updated policy here with a new "Last reviewed" date at the top. For significant changes affecting existing operators, we'll also email you.

Contact

Questions about this policy? Email [email protected].