1. Who we are
Great Outdoor Hubs is operated by Great Outdoor Hubs LLC, a company based in the State of Florida, United States. References to “we,” “us,” and “our” in this policy mean Great Outdoor Hubs LLC. References to “the Service” mean greatoutdoorhubs.com, our mobile apps, APIs, and any other product or feature linking to this policy.
For privacy questions or requests, contact privacy@greatoutdoorhubs.com or write to Great Outdoor Hubs LLC, 665 Barrington Circle, Winter Springs, FL 32708, United States.
2. Information we collect
We collect the following categories of information:
- Account information. Name, email address, password (stored as a one-way hash), language preference, and any optional profile fields (avatar, phone, business name, role).
- Operator and listing data. If you operate a business on the platform, the operational details you publish (services offered, locations, pricing, photos, hours, contact info, taxonomy, certifications, and equipment). Most of this is public by design.
- Content you submit. Reviews, messages, photos, catch logs, trip reports, support requests, and any other content you choose to share.
- Payment information. If you subscribe to a paid plan, billing details (name, address, last four digits of payment card, billing history) are processed by Stripe. We do not store full card numbers.
- Location data. Coarse and (with your consent) precise location, used for map-based features and locality search. We do not track location in the background unless you turn on a feature that explicitly requires it (e.g. trail recording).
- Device and usage data. Device type, operating system, browser type, app version, language, time zone, referring URL, and pages or screens visited. When you are signed in to the app, the screens you visit are associated with your account so features like your activity history and session security work. Used for security, debugging, and aggregate analytics.
- Website analytics. When you browse our public websites we record the page, how long you spent on it, the address of the page that linked you to us, any campaign tag in that link, a coarse device type, and a country. This runs by default and you can switch it off. See the Cookie Notice. It is first-party and cookieless: we do not store your IP address or user-agent string alongside it, we do not use Google Analytics or any advertising network, and we do not track you across other websites. The only identifier is a random session ID that expires after 30 minutes of inactivity.
- IP address. Processed transiently to rate-limit abuse, to derive a country, and to work out roughly which city you are browsing from so that some pages can show you listings near you. That approximate location is used to build the page you are reading and is never saved. The IP address itself is retained only in our abuse-prevention logs, and it is not stored with the website-analytics records described above.
- Cookies and similar technologies. See our separate Cookie Notice for details and consent controls.
3. How we use information
We use the information above for the following purposes:
- To provide, operate, and maintain the Service.
- To authenticate you and protect your account from unauthorized access.
- To process payments and manage subscriptions.
- To respond to support requests and other inquiries.
- To send transactional and service-related emails (account confirmations, billing receipts, security alerts, policy updates). You cannot opt out of these while your account is active.
- To send marketing or product-update emails, but only if you opt in. You can unsubscribe from these at any time using the link in the email.
- To detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service or Acceptable Use Policy.
- To produce aggregated and de-identified statistics that help us improve the product. These statistics do not identify individual users.
- To comply with legal obligations and enforce our agreements.
We do not sell or rent your personal information, and we do not share it with third parties for their own advertising purposes.
4. Legal bases for processing (EEA/UK users)
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:
- Performance of a contract, to provide the Service you have signed up for (account, subscription, transactional email).
- Legitimate interests, to keep the Service secure, prevent abuse, and improve features (balanced against your rights).
- Consent, for non-essential cookies, marketing email, and precise-location features. You can withdraw consent at any time.
- Legal obligation, to retain records required by tax, accounting, anti-fraud, or law-enforcement rules.
5. Who we share information with
We share information with the service providers (sub-processors) listed below only to the extent they need it to perform services on our behalf. They are contractually required to use the information only for our instructions and to protect it with appropriate safeguards.
| Sub-processor | Purpose | Region | Policy |
|---|---|---|---|
| Supabase | Hosted PostgreSQL database, authentication, and file storage | United States | Privacy policy |
| Vercel | Web hosting and edge delivery | United States | Privacy policy |
| Mapbox | Interactive maps and geocoding | United States | Privacy policy |
| Stripe | Subscription billing and payment processing (operator accounts) | United States | Privacy policy |
| Resend | Transactional and notification email delivery | United States | Privacy policy |
| Google Cloud (Places API & Gemini) | Operator business listing enrichment via the Places API (public business data), and AI image analysis via Gemini for photo features such as in-app photo effects and species identification (processes user-submitted photos) | United States | Privacy policy |
| Anthropic | AI assistant features (the Adventure Guide and in-app / cockpit Q&A) which process user-submitted questions | United States | Privacy policy |
We may also disclose information (a) to comply with a legally enforceable request, court order, or subpoena; (b) to enforce our agreements or protect the rights, property, or safety of Great Outdoor Hubs, our users, or the public; or (c) in connection with a merger, acquisition, financing, or sale of business assets, in which case we will give notice and require the recipient to honor this policy.
6. International transfers
Our sub-processors are primarily based in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. When required, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers from the EEA, UK, or Switzerland.
7. Data retention
We retain personal information only as long as needed for the purposes described in this policy. Default retention: For the life of your account, plus 24 months after account closure (or longer where required by law, tax, or audit obligations). We retain billing records, security logs, and abuse-investigation records for longer where required by law. When information is no longer needed, we delete or de-identify it.
8. Your rights
Subject to local law, you have the following rights with respect to your personal information:
- Access. Request a copy of the information we hold about you.
- Correction. Ask us to update inaccurate or incomplete information.
- Deletion. Ask us to delete your information. You can delete your account from your account settings, which initiates the deletion of your personal data subject to the retention exceptions above.
- Portability. Receive a copy of your data in a machine-readable format.
- Objection / restriction. Ask us to stop or limit certain processing.
- Withdraw consent. Where we rely on consent, you can withdraw it at any time without affecting prior lawful processing.
- Complain to a regulator. You may lodge a complaint with your local data-protection authority.
To exercise any of these rights, email privacy@greatoutdoorhubs.com. We will respond within 30 days (or sooner where the law requires). We may need to verify your identity before acting on the request.
9. California residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- The right to know the categories and specific pieces of personal information collected, the sources, the business purposes, and the categories of third parties with whom we share it.
- The right to delete personal information collected from you.
- The right to correct inaccurate personal information.
- The right to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA.
- The right to limit the use of sensitive personal information. We do not use sensitive personal information for purposes that trigger this right.
- The right not to be discriminated against for exercising these rights.
To exercise these rights, email privacy@greatoutdoorhubs.com. You may designate an authorized agent to act on your behalf with written authorization that we can verify.
10. EEA, UK, and Swiss users
The data controller is Great Outdoor Hubs LLC. We do not currently have a designated EU representative under Article 27 GDPR; if you are in the EEA or UK and need to exercise your rights, contact privacy@greatoutdoorhubs.com. You may lodge a complaint with your national supervisory authority.
11. Quebec residents (Law 25)
Quebec residents have rights under An Act respecting the protection of personal information in the private sector, as amended by Law 25, including rights of access, rectification, erasure, portability, de-indexing, and the right to be informed about automated decision-making. To exercise these rights, contact privacy@greatoutdoorhubs.com. We do not use automated decision-making that produces legal or similarly significant effects on individuals.
Signing in with Google
You can create your Great Outdoor Hubs account with an email address and password, or by choosing “Continue with Google.” Using a sign-in provider is optional. Email and password always works instead, and it gives you the same account.
When you sign in with Google, we receive only the basic profile information Google shares for the sign-in scopes we request: your name, your email address, your profile picture, and the account identifier Google issues for you. We do not request access to Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google service, and we have no ability to read them.
We use that information for one purpose: to create your account, sign you in, and show you as a recognizable person to other members. It is stored with the rest of your account record and kept for as long as your account exists. Your profile picture is copied onto our own storage so it keeps working after the temporary link from the provider expires.
We do not sell Google user data. We do not use it for advertising, we do not use it to train AI or machine-learning models, and we do not transfer it to anyone other than the sub-processors named above who operate the Service on our behalf.
You can disconnect Great Outdoor Hubs from your Google account at any time from Google’s account permissions page. That stops future sign-ins with Google, but on its own it does not delete your Great Outdoor Hubs account. To delete the account and the information held with it, follow the steps under “Your rights” above or contact privacy@greatoutdoorhubs.com.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact privacy@greatoutdoorhubs.com and we will delete the information.
Security
We use technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, and disclosure. These include encryption in transit (TLS), encryption at rest for production databases and backups, role-based access controls, and logging. No system is perfectly secure; we cannot guarantee absolute security.
Cookies and analytics
Our page-view analytics is first-party and cookieless, and runs by default. It sets no cookies, stores no IP address or user-agent, uses no third-party analytics or advertising service, and does not follow you to other websites. You can switch it off at any time via the “Manage cookies” link in the footer. Choose Decline, or open Customize preferences and turn Analytics off.
See our Cookie Notice for the full list of cookies we set, why, and how to manage your consent.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top and, for material changes, notify you by email or with a prominent notice in the Service. Your continued use after the changes take effect constitutes acceptance.
Contact
Privacy questions or requests: privacy@greatoutdoorhubs.com (data protection inbox); general inquiries: hello@greatoutdoorhubs.com.
Mail: Great Outdoor Hubs LLC, 665 Barrington Circle, Winter Springs, FL 32708, United States.