We do not sell your personal data. Ever.
1. Who We Are
RVSpot is operated by Booking Bridge LLC dba RVSpot ("RVSpot", "we", "us", "our"). We operate the website at RVSpot.net, a marketplace connecting RV travelers with park operators across the United States.
For privacy inquiries, contact us at legal@rvspot.net.
2. Data We Collect
We collect the following categories of personal data:
- Account data: First name, last name, email address, password (hashed — we never store plaintext passwords)
- Profile data: RV type, rig length, travel preferences, profile photo (optional)
- Booking data: Reservation dates, park selection, number of guests, rig details, special requests
- Communication data: Messages sent between guests and park operators through the platform
- Review data: Star ratings and written reviews you submit
- Usage data: Pages visited, search queries, features used, device type, browser, approximate location (country/state)
- Marketing preferences: Whether you have opted in to receive promotional emails
We do not collect Social Security numbers, government IDs, or sensitive health information.
3. How We Use Your Data
We use your data to:
- Create and maintain your account
- Process bookings and send booking confirmations
- Facilitate communication between guests and park operators
- Send transactional emails (booking receipts, reminders, check-in instructions)
- Send marketing emails, but only if you have explicitly opted in
- Improve search results and platform features
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Data Sharing
We share your data only in the following circumstances:
- With park operators: When you make a confirmed booking, we share your name, contact email, arrival/departure dates, and rig details with the park operator so they can prepare for your stay.
- With Stripe: Payment processing is handled entirely by Stripe. We share booking amounts and your email address with Stripe to process transactions. See Stripe's privacy policy at stripe.com/privacy.
- With Resend: We use Resend to deliver transactional and marketing emails. Your email address and name are shared with Resend solely for email delivery.
- With law enforcement: If required by law, court order, or to protect the safety of our users or the public.
We never sell, rent, or trade your personal data to advertisers or third-party data brokers.
5. Payment Data
RVSpot does not store your credit card numbers, bank account details, or any raw payment instrument data. All payment processing is handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor.
When you enter payment details on RVSpot, they are transmitted directly and securely to Stripe. RVSpot only receives a payment confirmation token and the last four digits of your card for display purposes.
For questions about how Stripe handles your payment data, visit stripe.com/privacy.
6. Marketing Communications
We will only send you promotional or marketing emails if you have explicitly opted in. The opt-in checkbox is presented at the time of booking and is unchecked by default — we never assume consent.
You can unsubscribe from marketing emails at any time by:
- Clicking the "Unsubscribe" link in any marketing email
- Updating your preferences in your account dashboard
- Emailing us at legal@rvspot.net
Unsubscribing from marketing emails does not affect transactional emails (booking confirmations, receipts), which we send regardless of marketing preferences as they are necessary to fulfill your bookings.
7. Data Retention
We retain your data for the following periods:
- Account data: For the life of your account, plus 90 days after deletion to allow for recovery
- Booking records: 7 years from the booking date, as required for tax and accounting compliance
- Reviews: Indefinitely, as they form part of the public park record (anonymized upon account deletion if requested)
- Usage/analytics data: Up to 24 months in aggregate, anonymized form
- Marketing consent records: Retained as long as legally required to demonstrate lawful basis for communications
8. Your Rights
You have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete data
- Deletion: Request deletion of your account and personal data (subject to legal retention requirements)
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing of your data for marketing purposes
To exercise any of these rights, email legal@rvspot.net with the subject line "Privacy Request." We will respond within 30 days.
Note: Booking records must be retained for 7 years for tax compliance. Deletion requests for booking data will result in anonymization (your name and contact details removed) rather than full deletion.
9. Cookies & Tracking
We use the following types of cookies and local storage:
- Essential cookies: Required for authentication and session management. Cannot be disabled.
- Analytics: We use privacy-friendly analytics to understand how visitors use the site. No personal data is shared with third-party ad networks.
- Session storage: Used temporarily to resume a checkout session after login. Cleared when your browser tab closes.
We do not use advertising cookies, Facebook Pixel, Google Ads tracking, or any behavioral advertising technology.
10. Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Bcrypt password hashing (we never store plaintext passwords)
- Row-level security on our database ensuring users can only access their own data
- Service role keys restricted to server-side use only
Despite these measures, no system is 100% secure. If you discover a security vulnerability, please report it responsibly to legal@rvspot.net.