Privacy Policy

Welcome to Boujee Beachin ("we," "our," or "us"). We operate the Boujee Beachin mobile application (the "App") and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By downloading, installing, or using Boujee Beachin, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

2.1 Information You Provide Directly

• •Account Information: Name, email address, phone number, and password when you create an account.
• •Profile Information: Profile photo (optional), business name (for vendors), and communication preferences.
• •Booking Information: Rental selections, time slots, special requests, and booking history.
• •Payment Information: Payment card details are collected and processed securely by Stripe, our PCI-compliant payment processor. We do not store your full card number, CVV, or expiration date on our servers.
• •Communications: Messages you send through the app, support inquiries, and feedback.
• •Vendor Information: If you register as a vendor, we collect business name, business address, equipment inventory details, pricing, and banking/payout information (processed by Stripe Connect).

2.2 Information Collected Automatically

• •Location Data: With your permission, we collect your approximate location to show beach vendors near you.
• •Device Information: Device type, operating system version, unique device identifiers, and push notification tokens.
• •Usage Data: Pages viewed, features used, interaction patterns, search queries, and session duration.
• •Log Data: IP address, browser type, access times, and error logs.

2.3 Information from Third-Party Services

If you sign in using Google or Apple, we receive your name, email address, and profile identifier from those services. We do not receive your passwords from these providers.

We use the information we collect to:

• •Process Bookings: Facilitate beach equipment rentals including reservation management, QR code generation, and booking confirmations.
• •Process Payments: Charge customers for bookings and distribute payouts to vendors via Stripe.
• •Communicate With You: Send booking confirmations, reminders, and updates via email, SMS, and push notifications.
• •Provide Customer Support: Respond to inquiries, resolve disputes, and process refund requests.
• •Improve Our Service: Analyze usage patterns, fix bugs, develop new features, and optimize the user experience.
• •Ensure Safety: Detect and prevent fraud, enforce our terms, and maintain platform integrity.
• •Personalize: Show relevant vendors, remember preferences, and deliver tailored notifications.
• •Legal Compliance: Fulfill legal obligations and respond to lawful requests.

We use trusted third-party services to operate Boujee Beachin:

• •Encryption in Transit: All data transmitted is encrypted using TLS/SSL (HTTPS).
• •Encryption at Rest: Our database encrypts all stored data using AES-256.
• •PCI Compliance: Payment processing is handled by Stripe, a PCI DSS Level 1 certified processor.
• •Password Security: Passwords are hashed using bcrypt with salt rounds.
• •Security Headers: Our API uses Helmet.js, rate limiting, and input validation.

We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Period.

When We Share Data

• •With Vendors: Booking details shared to prepare your equipment.
• •With Service Providers: As described in Section 4.
• •For Legal Compliance: When required by law or to protect our rights.
• •Business Transfers: In the event of a merger or acquisition.
• •With Your Consent: When you explicitly authorize us.

• •Access: Request a copy of the personal data we hold about you.
• •Correction: Update or correct inaccurate information.
• •Deletion: Request deletion of your account and associated data.
• •Data Portability: Request your data in a machine-readable format.
• •Opt-Out: Unsubscribe from promotional emails or disable push notifications.
• •Location Access: Revoke location permissions at any time.

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 30 days.

Boujee Beachin is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected data from a child under 13, we will delete that information promptly.

Users between 13 and 18 years old may use the App with parental or guardian consent.

• •Account Data: Retained while active. Deleted within 30 days of deletion request.
• •Booking Records: Retained for 3 years for legal and tax purposes.
• •Payment Records: Retained by Stripe per their data retention policy.
• •Usage Analytics: Aggregated and anonymized data may be retained indefinitely.
• •Support Communications: Retained for 2 years.

GDPR (European Economic Area)

If you are in the EEA, you have additional rights under GDPR including rights to access, rectification, erasure, restriction, portability, and objection to processing.

CCPA (California)

California residents have rights to know what data we collect, request deletion, opt out of data sales (we don't sell), and non-discrimination. Email [email protected] with "CCPA Request" in the subject line.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date, send a notification, and display an in-app notice.