Privacy Policy

1. Introduction

Social RV ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform.

This policy applies to all users worldwide, including those in the European Union (GDPR) and California (CCPA/CPRA).

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, display name, password (encrypted)
  • Profile Information: Optional profile picture, bio, location
  • Remote Viewing Sessions: Uploaded PDFs, images, notes, and drawings of your remote viewing work
  • User Content: Comments, ratings, feedback you provide
  • Communication: Messages sent to our support team
  • Payment Information: Processed securely by Stripe (we do not store credit card details)

2.2 Information We Collect Automatically

  • Usage Data: Pages viewed, features used, session duration, clicks
  • Device Information: Browser type, device type, operating system, IP address
  • Location Data: Approximate location based on IP address
  • Cookies and Tracking: Analytics cookies, session cookies, preference cookies
  • Session Recordings: We use PostHog to record user sessions for improving user experience (with sensitive data masked)

3. How We Use Your Information

We use your data for the following purposes:

  • Service Provision: Operating the platform, managing your account, displaying your sessions
  • Research: Analyzing remote viewing performance, publishing aggregate/anonymized findings
  • AI Training: Training machine learning models to improve scoring and analysis features
  • Platform Improvement: Understanding user behavior, fixing bugs, developing new features
  • Communication: Sending account notifications, updates, responding to support requests
  • Security: Detecting fraud, abuse, and security threats
  • Legal Compliance: Meeting legal obligations and responding to legal requests

4. Legal Basis for Processing (GDPR)

  • Consent: You consent to our use of analytics, cookies, and AI training when you accept our cookie banner
  • Contract: Processing necessary to provide the service you signed up for
  • Legitimate Interest: Improving our platform, conducting research, ensuring security
  • Legal Obligation: Complying with applicable laws

5. Third-Party Services and Data Sharing

We share data with the following third-party services to operate our platform:

  • Supabase: Database hosting and authentication (servers in US)
  • PostHog: Analytics, session recording, heatmaps (servers in US)
  • Vercel: Hosting and performance analytics (servers in US)
  • OpenAI: AI-powered session analysis and scoring (servers in US)
  • Stripe: Payment processing for donations (servers in US)
  • Google Maps: Location services (servers in US)

CCPA Notice - Data Sharing: The services listed above may constitute "sharing" under CCPA definitions. California residents can opt out of this sharing using the "Do Not Sell or Share My Personal Information" link in the footer.

6. Data Retention

We retain your data as follows:

  • Account Data: Deleted within 30 days of deletion request
  • Remote Viewing Sessions: When you delete your account, your sessions are anonymized (all identifying information removed) and retained indefinitely for research purposes. Anonymized data is not considered personal data under GDPR/CCPA.
  • Comments: Deleted with your account (within 30 days)
  • Analytics Data: Aggregated data retained indefinitely; individual session recordings for 90 days
  • Backups: Data in backups purged after 90 days

Note on Anonymization: Anonymized sessions have all personal identifiers removed (your name, email, account ID, IP address, etc.). The session drawings and data remain for research, but cannot be linked back to you.

7. Your Privacy Rights

Depending on your location, you have the following rights:

For All Users:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your account and data
  • Export your data in a portable format
  • Opt out of marketing communications

GDPR Rights (EU Users):

  • Right to be forgotten (account and personal data will be deleted; sessions will be anonymized)
  • Right to data portability
  • Right to restrict processing
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users):

  • Right to know what data we collect and how we use it
  • Right to delete your personal information (sessions will be anonymized for research)
  • Right to opt out of "sale" or "sharing" of data
  • Right to non-discrimination for exercising your rights
  • Right to correct inaccurate information

To exercise these rights, visit your Account Settings or contact us at contact@social-rv.com.

8. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential Cookies: Required for authentication and basic functionality
  • Analytics Cookies: PostHog and Vercel Analytics to understand usage patterns
  • Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through our cookie banner and your browser settings. However, disabling essential cookies may limit functionality.

9. Data Security

We implement industry-standard security measures including encryption, secure authentication, and regular security audits. However, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

10. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it promptly.

11. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy-related questions, to exercise your rights, or to request data deletion/export:

We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA).

Last Updated: January 2026