Privacy Policy

Last updated: November 30, 2025

Introduction

OurSharedPlace ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vacation property management platform.

Information We Collect

Information You Provide

We collect information that you voluntarily provide when using our service:

Account Information: Name, email address, password
Profile Information: Display name, avatar image
Property Information: Property names, descriptions, addresses, photos
Contact Information: Vendor and service provider contact details you choose to store
Content: Blog posts, to-do items, calendar bookings, photos, and other content you create
Communications: Messages you send to us for support or feedback

Automatically Collected Information

When you use our service, we automatically collect certain information:

Usage Data: Pages visited, features used, time spent on the platform
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, referring URLs

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Create and manage your account
Process your bookings and calendar requests
Send you notifications about booking requests and property updates
Respond to your comments, questions, and support requests
Monitor and analyze usage patterns and trends
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

Information Sharing and Disclosure

Within Your Property Group

Information you add to a property (bookings, blog posts, photos, contacts, to-dos) is shared with other members of that property according to the visibility settings you choose. Administrators can see all property data, members can see member-level content, and guests have view-only access to guest-visible content.

Service Providers

We share information with third-party service providers who perform services on our behalf:

Supabase: Database hosting and authentication services
Postmark: Email delivery services for notifications
Payment Processors: To process subscription payments (when implemented)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

Encryption of data in transit using SSL/TLS
Encryption of data at rest in our databases
Regular security assessments and updates
Access controls and authentication mechanisms
Regular backups of your data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Property data is retained as long as the property exists. When a property is deleted, all associated data (bookings, photos, blog posts, etc.) is permanently deleted.

Your Rights and Choices

You have the following rights regarding your personal information:

Access: You can access and review your personal information through your account settings
Correction: You can update or correct your personal information at any time
Deletion: You can request deletion of your account and personal information
Data Portability: You can request a copy of your data in a portable format
Opt-out: You can opt out of marketing communications (service-related communications may still be sent)

To exercise these rights, please contact us at the email address provided below.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure that appropriate safeguards are in place to protect your information.

Cookies and Tracking Technologies

We use essential cookies and similar tracking technologies to maintain your session and provide core functionality. We do not use third-party advertising or analytics cookies. You can control cookies through your browser settings, but disabling cookies may affect your ability to use certain features of our service.

Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please use our contact form.

California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us using the information provided above.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

Our legal basis for processing your personal data is primarily your consent and the performance of our contract with you. To exercise your rights or file a complaint with a supervisory authority, please contact us.