Privacy Policy

• Park owners who create a FlatSite account. For their account and billing data, FlatSite decides how it is used.
• Guests who book on a park's booking page. The park decides how guest data is used; FlatSite processes it on the park's behalf to provide the service. For questions about your stay, contact the park.

• Account information: name, email, password (stored encrypted), park details, sites, prices, photos and settings.
• Reservation information entered by guests or parks: name, email, phone, dates, number of guests, RV type and length, notes, amounts and, for monthly stays, meter readings and invoices.
• Payment information: payments are handled by Stripe. We receive the payment status and amounts, but never full card numbers.
• Technical information: IP address, browser and basic logs needed for security and to fix problems.
• Cookies: only what's needed to keep you signed in. We don't use advertising or tracking cookies. Guests' browsers may remember their RV details locally to save time.

• To provide FlatSite: show booking pages, record reservations, send confirmation, reminder and invoice emails, and show dashboards.
• To keep accounts secure (for example, sign-in codes by email) and prevent abuse.
• To bill park owners for their subscription.
• To reply to support requests and send important service notices. We'll only send marketing emails if you opt in, and you can unsubscribe anytime.
• To comply with the law.

We share information only with the service providers that help us run FlatSite, under contracts that protect it:

• Vercel (hosting) and Supabase (database) — to store and serve the application and its data.
• Stripe — to process subscription and guest payments.
• Resend — to deliver emails.

Guest reservation details are shared with the park where the guest booked. We may disclose information if required by law or to protect the rights and safety of our users. We never sell or rent personal information.

We keep account and reservation data while the park's account is active. When an account is closed, we delete its data within 90 days, except records we must keep for legal, tax or accounting reasons.

Depending on where you live (for example, California under the CCPA, or the EU/UK under the GDPR), you may have the right to access, correct, export or delete your personal information, and to object to or restrict some uses. Guests should first contact the park they booked with; we'll help the park respond. To make a request to us, reply to any email you've received from us. We won't discriminate against you for exercising your rights.

All traffic is encrypted (HTTPS), passwords are hashed, sign-ins require a code sent by email and access to the database is restricted. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you as required by law if a breach affects you.

FlatSite and its providers may process data in the United States and other countries. When we transfer data from the EU/UK, we rely on appropriate safeguards such as the providers' standard contractual clauses.

FlatSite is not directed to children under 13, and we don't knowingly collect their information.

If we make important changes to this policy, we'll post them here and email park owners. Questions or requests? reply to any email you've received from us.