Privacy Policy

1. Overview

NextCamp ("we", "us", or "our") operates the NextCamp platform, including the website and mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our platform. We may update this policy from time to time and will notify you of material changes.

2. Data We Collect

We collect information you provide directly to us and information collected automatically when you use the platform.

• Account information: name, email address, password, and profile photo.
• Booking data: check-in/out dates, number of guests, and payment details (processed securely via Stripe — we do not store full card numbers).
• Usage data: pages visited, searches performed, and interactions with listings.
• Device and log data: IP address, browser type, operating system, and referral URLs.
• Communications: messages between guests and hosts through our platform.

3. How We Use Data

We use the information we collect to operate, improve, and protect our platform. Specifically, we use your data to:

• Process bookings and send confirmation, reminder, and receipt emails.
• Facilitate communication between guests and hosts.
• Detect and prevent fraud, abuse, and security incidents.
• Personalise search results and recommendations.
• Comply with legal obligations.

4. Sharing Your Data

We do not sell your personal data. We share information only in the following limited circumstances:

• With hosts: when you make a booking, the host receives your name, contact details, and stay information necessary to fulfill the booking.
• With service providers: we use trusted third parties (Supabase, Stripe, Resend) to operate our platform under strict data processing agreements.
• For legal compliance: when required by law or to protect the rights, property, or safety of NextCamp, our users, or the public.

5. Retention & Deletion

We retain your personal data for as long as your account is active or as needed to provide you services. We retain booking records for seven years for financial compliance purposes.

You may request deletion of your account and associated data at any time by contacting us at the address below. Note that some data may need to be retained to comply with legal obligations or resolve disputes.

6. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable privacy law:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Portability: request your data in a machine-readable format.
• Objection: object to certain types of processing, including direct marketing.

7. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through our contact page or write to us at: