Privacy Policy

Last updated: [DATE]

Draft template — not yet reviewed by an attorney. This reflects the actual data Retree collects and the actual third-party services it uses today, but hasn't been reviewed by a lawyer and doesn't yet cover region-specific requirements (e.g. GDPR, CCPA) in detail. Have it reviewed before relying on it with real user data.

1. What this covers

This policy explains what information Retree collects when you use the platform as a Traveler or Operator, how we use it, and who we share it with.

2. Information we collect

Account information: name, email address, and password (handled by our authentication provider, Supabase — we never see or store your raw password).

Booking information: the retreats you view, save, and book; party size; dates; messages you send to Operators through the platform.

Payment information: processed directly by Stripe. Retree does not store your card number or full payment details — we retain only booking amounts and Stripe's transaction references.

Operator application information: if you apply to list retreats, business details, insurance documentation, and any other materials you submit as part of the vetting process.

Usage information: basic technical data (e.g. pages visited) collected automatically as part of running the site.

3. How we use it

To create and manage your account and bookings
To process payments and payouts
To send booking, application, and account emails (confirmations, cancellations, review replies, etc.)
To vet Operator applications
To operate in-app notifications and messaging between Travelers and Operators
To maintain the security and integrity of the platform

4. Who we share it with

We share information with the third-party services that power Retree, and no one else, except as required by law:

Supabase — database, authentication, and file storage
Stripe — payment processing and Operator payouts
Resend — transactional email delivery
Vercel — application hosting

An Operator you book with can see your name and the messages/booking details needed to fulfill your reservation. We do not sell your personal information.

5. Cookies

We use essential cookies to keep you signed in and to operate the booking flow. We don't currently use advertising or third-party tracking cookies.

6. Data retention

We retain account and booking data for as long as your account is active, and as needed to comply with legal, tax, and accounting obligations after that.

7. Your rights

You can review and update your account information from your profile. To request a copy of your data or ask us to delete your account, contact us at the address below.

8. Children

Retree is not directed to anyone under 18, and we don't knowingly collect information from children.

9. Changes to this policy

If we make material changes, we'll update the date at the top of this page.

10. Contact

Questions about this policy: privacy@retree.life